Red Hat Security AdvisoryRHSA-2025:9759
OpenShift Container Platform 4.14.53 bug fix and security update
Released 2025-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-cluster-image-registry-operator, openshift4/ose-cluster-openshift-apiserver-operator
Fixes 2 records
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
Priority LOW 34
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00576 · Published 2024-12-31 · Partial fix · v4.12.0-202506062300.p0.gb870fc6.assembly.stream.el8, v4.13.0-202507061330.p0.g9abb220.assembly.stream.el8 +165 CWE-732
