Red Hat Security Advisory: OpenShift Container Platform 4.16.58 packages and security update
Red Hat OpenShift Container Platform 4. 16. 58 includes security updates addressing two vulnerabilities: CVE-2025-61729, a denial of service caused by excessive resource consumption via crafted certificates in the crypto/x509 Go package, and CVE-2025-58183, an unbounded memory allocation vulnerability when parsing GNU sparse maps in the Go archive/tar package. These issues could lead to resource exhaustion impacting the availability of affected systems. Red Hat has released updated RPM packages and container images to fix these vulnerabilities. Users of OpenShift Container Platform 4. 16 are advised to upgrade to the updated packages and images through the official release channels. Detailed upgrade instructions are provided by Red Hat. No known exploits in the wild have been reported at this time.
AI Analysis
Technical Summary
This advisory covers security fixes in Red Hat OpenShift Container Platform 4.16.58 addressing two vulnerabilities in Go components used by the platform. CVE-2025-61729 involves a denial of service vulnerability in the crypto/x509 package due to excessive resource consumption triggered by crafted certificates. CVE-2025-58183 is an unbounded allocation vulnerability in the archive/tar package when parsing GNU sparse maps, potentially leading to resource exhaustion. Red Hat has issued updated RPM packages and container images to remediate these issues. The advisory recommends upgrading OpenShift Container Platform 4.16 clusters using the OpenShift CLI or web console. The vendor rates the security impact as Important (high severity).
Potential Impact
The vulnerabilities can cause denial of service conditions by exhausting system resources through crafted inputs (certificates or tar archives). This impacts the availability of OpenShift Container Platform 4.16 deployments. No information about privilege escalation, data disclosure, or code execution is provided. There are no known exploits in the wild at the time of this advisory.
Mitigation Recommendations
Red Hat has released updated packages and container images in OpenShift Container Platform 4.16.58 that fix these vulnerabilities. Users should upgrade their clusters using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channels. Detailed upgrade instructions are available in Red Hat's official documentation. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.
Red Hat Security Advisory: OpenShift Container Platform 4.16.58 packages and security update
Description
Red Hat OpenShift Container Platform 4. 16. 58 includes security updates addressing two vulnerabilities: CVE-2025-61729, a denial of service caused by excessive resource consumption via crafted certificates in the crypto/x509 Go package, and CVE-2025-58183, an unbounded memory allocation vulnerability when parsing GNU sparse maps in the Go archive/tar package. These issues could lead to resource exhaustion impacting the availability of affected systems. Red Hat has released updated RPM packages and container images to fix these vulnerabilities. Users of OpenShift Container Platform 4. 16 are advised to upgrade to the updated packages and images through the official release channels. Detailed upgrade instructions are provided by Red Hat. No known exploits in the wild have been reported at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in Red Hat OpenShift Container Platform 4.16.58 addressing two vulnerabilities in Go components used by the platform. CVE-2025-61729 involves a denial of service vulnerability in the crypto/x509 package due to excessive resource consumption triggered by crafted certificates. CVE-2025-58183 is an unbounded allocation vulnerability in the archive/tar package when parsing GNU sparse maps, potentially leading to resource exhaustion. Red Hat has issued updated RPM packages and container images to remediate these issues. The advisory recommends upgrading OpenShift Container Platform 4.16 clusters using the OpenShift CLI or web console. The vendor rates the security impact as Important (high severity).
Potential Impact
The vulnerabilities can cause denial of service conditions by exhausting system resources through crafted inputs (certificates or tar archives). This impacts the availability of OpenShift Container Platform 4.16 deployments. No information about privilege escalation, data disclosure, or code execution is provided. There are no known exploits in the wild at the time of this advisory.
Mitigation Recommendations
Red Hat has released updated packages and container images in OpenShift Container Platform 4.16.58 that fix these vulnerabilities. Users should upgrade their clusters using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channels. Detailed upgrade instructions are available in Red Hat's official documentation. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:4464
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-61729"]
- Cvss Version
- null
Threat ID: 6a160970e29bf47b50638243
Added to database: 5/26/2026, 8:58:24 PM
Last enriched: 5/26/2026, 9:50:56 PM
Last updated: 5/27/2026, 4:53:23 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.