This security advisory from Red Hat addresses multiple vulnerabilities in the cert-manager Operator for Red Hat OpenShift 1.17.1, which extends Kubernetes by managing certificate authorities and certificates as native API resources. The vulnerabilities are tracked under CVE-2025-47907 and five additional CVEs. The advisory does not provide detailed technical descriptions of the vulnerabilities but categorizes them under CWEs related to concurrency and resource management issues (CWE-362, CWE-770, CWE-1050). The cert-manager Operator can be upgraded automatically if the approval policy is set to Automatic, or manually if set to Manual, to mitigate these vulnerabilities. The advisory does not explicitly list patches but provides updated container image references for the operator.

The vulnerabilities affect the cert-manager Operator for Red Hat OpenShift 1.17.1, potentially impacting the management of certificate authorities and certificates within Kubernetes clusters. The severity is rated high, indicating significant risk if exploited. No known exploits are reported in the wild. The impact involves the integrity and availability of certificate management services in OpenShift environments.

Red Hat recommends applying the updated cert-manager Operator images as provided in the advisory. If the installation uses the default Automatic approval policy, the operator will upgrade automatically with no user intervention required. For Manual approval policies, administrators must manually approve the upgrade. Prior to upgrading, ensure all previously released errata relevant to the system have been applied. Refer to the official Red Hat documentation for detailed upgrade instructions. No other specific mitigations are indicated.