RHSA-2025:10294HighCVSS 7.6
Red Hat Security Advisory: OpenShift Container Platform 4.17.35 bug fix and security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2024-45497 — openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials CVE-2025-4802 — glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-22871 — net/http: Request smuggling due to acceptance of invalid chunked data in net/http
🔗 References (20)
- selfhttps://access.redhat.com/errata/RHSA-2025:10294
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2308673
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2348366
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2358493
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2367468
- externalhttps://issues.redhat.com/browse/OCPBUGS-49702
- externalhttps://issues.redhat.com/browse/OCPBUGS-55021
- externalhttps://issues.redhat.com/browse/OCPBUGS-55518
- externalhttps://issues.redhat.com/browse/OCPBUGS-55723
- externalhttps://issues.redhat.com/browse/OCPBUGS-57107
- externalhttps://issues.redhat.com/browse/OCPBUGS-57182
- externalhttps://issues.redhat.com/browse/OCPBUGS-57196
- externalhttps://issues.redhat.com/browse/OCPBUGS-57289
- externalhttps://issues.redhat.com/browse/OCPBUGS-57293
- externalhttps://issues.redhat.com/browse/OCPBUGS-57446
- externalhttps://issues.redhat.com/browse/OCPBUGS-57932
- externalhttps://issues.redhat.com/browse/OCPBUGS-58091
- externalhttps://issues.redhat.com/browse/OCPBUGS-58218
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10294.json