Red Hat Security Advisory

RHSA-2025:8284

OpenShift Container Platform 4.18.16 bug fix and security update

Released 2025-06-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47

TI-2016-07969 CVE-2016-9840 · GHSA-wrj6-35fr-8xw5

MEDIUM 48

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04875 Published 2017-05-23 Fixed

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286