Red Hat Security Advisory

RHSA-2025:9765

OpenShift Container Platform 4.16.43 bug fix and security update

Released 2025-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-openshift-apiserver-rhel9-operator, rhcos

Fixes 3 records

TI-2025-04297 CVE-2025-4802 · GHSA-8mm9-c4mg-vfjh

Untrusted search path in GNU glibc

LOW 37

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlo…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00593 Published 2025-05-16 Partial fix · 2.39 CWE-426

TI-2024-08048 CVE-2024-8676 · GHSA-7p9f-6x8j-gxxp

Cri-o: checkpoint restore can be triggered from different namespaces

LOW 36

A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0075 Published 2024-11-26 Partial fix · 1.29.11, 1.30.8 +7 CWE-285

TI-2024-30537 CVE-2024-45497 · GHSA-9786-79mw-2pj9

Incorrect permission assignment in openshift

LOW 34

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00576 Published 2024-12-31 Partial fix · v4.12.0-202506062300.p0.gb870fc6.assembly.stream.el8, v4.13.0-202507061330.p0.g9abb220.assembly.stream.el8 +165 CWE-732