Red Hat Security Advisory

RHSA-2025:3053

Gatekeeper v3.15.4

Released 2025-03-20 · Red Hat rating Important · View on Red Hat →

Fixed in

gatekeeper 3.15 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator

Fixes 2 records

TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

MEDIUM 41

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2025-02-26 Partial fix · 0.35.0 CWE-770

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

Unexpected memory consumption during token parsing in golang.org/x/oauth2

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286