RHSA-2025:9759HighCVSS 7.6
Red Hat Security Advisory: OpenShift Container Platform 4.14.53 bug fix and security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2024-45497 — openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2025:9759
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2308673
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2348366
- externalhttps://issues.redhat.com/browse/OCPBUGS-43743
- externalhttps://issues.redhat.com/browse/OCPBUGS-55467
- externalhttps://issues.redhat.com/browse/OCPBUGS-55620
- externalhttps://issues.redhat.com/browse/OCPBUGS-55936
- externalhttps://issues.redhat.com/browse/OCPBUGS-56127
- externalhttps://issues.redhat.com/browse/OCPBUGS-56194
- externalhttps://issues.redhat.com/browse/OCPBUGS-56548
- externalhttps://issues.redhat.com/browse/OCPBUGS-56951
- externalhttps://issues.redhat.com/browse/OCPBUGS-57099
- externalhttps://issues.redhat.com/browse/OCPBUGS-57321
- externalhttps://issues.redhat.com/browse/OCPBUGS-57341
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9759.json