Red Hat Security AdvisoryRHSA-2025:8280
OpenShift Container Platform 4.17.32 bug fix and security update
Released 2025-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 4 records
Priority MEDIUM 48
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04875 · Published 2017-05-23 · Fixed
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333
Priority LOW 31
A flaw was found in OpenShift Console.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00584 · Published 2024-11-25 · Fixed in 6.0.6, v4.16.0-202506020836.p0.g94ae640.assembly.stream.el9 +4 CWE-918
THREATIST.IORead the docs