RHSA-2025:10771HighCVSS 8.2
Red Hat Security Advisory: OpenShift Container Platform 4.19.4 bug fix and security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2025-32462 — sudo: LPE via host option
🔗 References (26)
- selfhttps://access.redhat.com/errata/RHSA-2025:10771
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2374692
- externalhttps://issues.redhat.com/browse/OCPBUGS-54458
- externalhttps://issues.redhat.com/browse/OCPBUGS-55918
- externalhttps://issues.redhat.com/browse/OCPBUGS-56163
- externalhttps://issues.redhat.com/browse/OCPBUGS-56781
- externalhttps://issues.redhat.com/browse/OCPBUGS-57206
- externalhttps://issues.redhat.com/browse/OCPBUGS-57781
- externalhttps://issues.redhat.com/browse/OCPBUGS-57922
- externalhttps://issues.redhat.com/browse/OCPBUGS-58073
- externalhttps://issues.redhat.com/browse/OCPBUGS-58116
- externalhttps://issues.redhat.com/browse/OCPBUGS-58263
- externalhttps://issues.redhat.com/browse/OCPBUGS-58276
- externalhttps://issues.redhat.com/browse/OCPBUGS-58279
- externalhttps://issues.redhat.com/browse/OCPBUGS-58284
- externalhttps://issues.redhat.com/browse/OCPBUGS-58316
- externalhttps://issues.redhat.com/browse/OCPBUGS-58335
- externalhttps://issues.redhat.com/browse/OCPBUGS-58343
- externalhttps://issues.redhat.com/browse/OCPBUGS-58350
- externalhttps://issues.redhat.com/browse/OCPBUGS-58375
- externalhttps://issues.redhat.com/browse/OCPBUGS-58377
- externalhttps://issues.redhat.com/browse/OCPBUGS-58394
- externalhttps://issues.redhat.com/browse/OCPBUGS-58403
- externalhttps://issues.redhat.com/browse/OCPBUGS-58820
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10771.json