Red Hat Security AdvisoryRHSA-2025:9562
OpenShift Container Platform 4.20.0 bug fix and security update
Released 2025-10-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9 +8
Fixes 4 records
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00939 · Published 2025-02-26 · Partial fix · 0.35.0 CWE-770
Priority MEDIUM 40
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00494 · Published 2025-07-08 · Partial fix · 3.18.4, 3.17.4 CWE-94
Priority LOW 34
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00576 · Published 2024-12-31 · Partial fix · v4.12.0-202506062300.p0.gb870fc6.assembly.stream.el8, v4.13.0-202507061330.p0.g9abb220.assembly.stream.el8 +165 CWE-732
Priority LOW 33
When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2025-01-28 · Partial fix · 1.2.4 CWE-377
THREATIST.IORead the docs