Red Hat Security Advisory

RHSA-2025:3577

OpenShift Container Platform 4.18.8 bug fix and security update

Released 2025-04-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 openshift4/ose-aws-cluster-api-controllers-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel9, openshift4/ose-cloud-credential-rhel9-operator +1

Fixes 3 records

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

jwt-go allows excessive memory allocation during header parsing

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405

TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269

TI-2025-00524 CVE-2025-0624 · GHSA-q3rr-g46f-jgqr

Grub2: net: out-of-bounds write in grub_net_search_config_file()

LOW 38

A flaw was found in grub2.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.01405 Published 2025-02-19 Fixed in 1:2.02-0.87.el7_9.15, 1:2.02-162.el8_10 +15 CWE-787