Red Hat Security Advisory

RHSA-2025:23542

OpenShift File Integrity Operator bug fix and enhancement update

Released 2025-12-17 · Red Hat rating Low · View on Red Hat →

Fixed in

OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator

TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv

LOW 28

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00243 Published 2025-08-07 Partial fix · 0.15.2, v4.17.39-2 +119 CWE-276