This advisory covers security fixes in Red Hat OpenShift Container Platform 4.14.50, specifically addressing three vulnerabilities: a use-after-free in libxml2 (CVE-2024-56171), a stack-based buffer overflow in libxml2's xmlSnprintfElements function (CVE-2025-24928), and an excessive memory allocation vulnerability during header parsing in golang-jwt/jwt (CVE-2025-30204). These vulnerabilities affect the OpenShift Container Platform 4.14 series prior to 4.14.50. The advisory provides updated container images and packages to remediate these issues. Users should upgrade their clusters using the OpenShift CLI or web console following Red Hat's documented procedures.

The vulnerabilities fixed in this update could allow attackers to exploit memory corruption issues (use-after-free and stack-based buffer overflow) and excessive memory allocation, potentially leading to denial of service or other impacts depending on the context of use. Red Hat rates the security impact as Important, indicating a high severity but not critical. No known exploits in the wild have been reported at this time.

A fix is available in Red Hat OpenShift Container Platform version 4.14.50. All users running versions >=4.14.0 and <4.14.50 are advised to upgrade to 4.14.50 or later to remediate these vulnerabilities. Upgrades can be performed using the OpenShift CLI (oc) or the web console. Detailed upgrade instructions are provided in Red Hat's official documentation. No additional mitigations are specified beyond applying the update.