RHSA-2025:4204HighCVSS 7.5
Red Hat Security Advisory: OpenShift Container Platform 4.17.27 bug fix and security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
🔗 References (17)
- selfhttps://access.redhat.com/errata/RHSA-2025:4204
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268046
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2354195
- externalhttps://issues.redhat.com/browse/OCPBUGS-43005
- externalhttps://issues.redhat.com/browse/OCPBUGS-52957
- externalhttps://issues.redhat.com/browse/OCPBUGS-52999
- externalhttps://issues.redhat.com/browse/OCPBUGS-53036
- externalhttps://issues.redhat.com/browse/OCPBUGS-53037
- externalhttps://issues.redhat.com/browse/OCPBUGS-53077
- externalhttps://issues.redhat.com/browse/OCPBUGS-54534
- externalhttps://issues.redhat.com/browse/OCPBUGS-54941
- externalhttps://issues.redhat.com/browse/OCPBUGS-54960
- externalhttps://issues.redhat.com/browse/OCPBUGS-55033
- externalhttps://issues.redhat.com/browse/OCPBUGS-55080
- externalhttps://issues.redhat.com/browse/OCPBUGS-55224
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4204.json