This advisory covers the release of Red Hat OpenShift Container Platform 4.15.3, which contains a security fix for CVE-2024-25620, a path traversal vulnerability in Helm's dependency management. The vulnerability is categorized under CWE-22 (Path Traversal). The update addresses this moderate severity issue by providing patched container images and RPM packages. Red Hat recommends all OpenShift Container Platform 4.15 users upgrade to these updated versions to mitigate the vulnerability. The advisory includes instructions and links to official documentation for upgrading clusters and verifying image digests for multiple architectures including x86_64, s390x, ppc64le, and aarch64.

The vulnerability allows potential path traversal in Helm dependency management, which could lead to unauthorized access or manipulation of files within the affected environment. Red Hat rates the security impact as moderate. No known exploits in the wild have been reported. The issue affects on-premise or private cloud deployments of OpenShift Container Platform 4.15.

A fix is available in Red Hat OpenShift Container Platform 4.15.3. Users should upgrade to this version using the OpenShift CLI or web console as soon as the updated packages and container images are available in their release channel. Detailed upgrade instructions are provided in the official Red Hat documentation. No additional mitigation steps are indicated beyond applying the official update.