Red Hat Security Advisory

RHSA-2025:4204

OpenShift Container Platform 4.17.27 bug fix and security update

Released 2025-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift4/ose-cluster-etcd-rhel9-operator, openshift4/ose-oauth-proxy-rhel9

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405