Skip to main content
EPSS 0.3%top 76%

Red Hat Security Advisory: OpenShift Container Platform 4.19.9 bug fix and security update

0
High
Published: 08/19/2025 (08/19/2025, 18:53:28 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.19.9. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHBA-2025:13827 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Security Fix(es): * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) * github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog (CVE-2024-45339) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.

Affected software

Affected versions
>=4.18 <4.19.9>=4.19 <4.19.9Red HatRed Hat OpenShift EnterpriseRed Hat OpenShift Container Platform 4.16ppc64leopenshift4/ose-cluster-autoscaler-rhel9@sha256:a642b9ca8a251150741207528d01627017f2b93d10247763373e15c208efa1c0_ppc64leRed Hat OpenShift Container PlatformRed Hat OpenShift Container Platform 4.19amd64registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:fbd9d5d870df6ca95974081b50fa8f8b787f2e8bece7d9c9b14626fdaefea50f_amd64Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:94a7a1e65fc53c4dd51546879ef4350a55ba784758228fcae8787756480936e0_ppc64les390xregistry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:43bb193b94927bff58398651428b090bc9cd53ea6c7055e9946b6a7fd48aa730_s390xRed Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:18032f7dd2ce8f5bf3df51c3888e3d7ddf2f182b77ddd2d0b644742e640432a0_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/14/2026, 22:28:05 UTC

Technical Analysis

This advisory covers security fixes in Red Hat OpenShift Container Platform 4.19.9, including CVE-2024-45339, a vulnerability in the golang/glog logging library. The flaw allows local attackers with low privileges to exploit predictable log file paths and create symbolic links in writable directories to overwrite sensitive files, potentially bypassing protection mechanisms. The vulnerability is rated with a CVSS v3 score of 7.1 by Red Hat, indicating high confidentiality and integrity impact. Red Hat provides updated container images and RPM packages to address this issue and recommends upgrading to these fixed versions.

Potential Impact

An attacker with local access and low privileges may exploit this vulnerability to overwrite sensitive files by planting symbolic links in writable directories, potentially leading to confidentiality and integrity breaches. This could allow bypassing of security mechanisms relying on file integrity. The vulnerability does not affect availability. There are no known exploits in the wild at this time.

Mitigation Recommendations

Red Hat has released updated container images and RPM packages in OpenShift Container Platform 4.19.9 that fix this vulnerability. Users are strongly advised to upgrade to version 4.19.9 or later using the OpenShift CLI or web console following Red Hat's documented upgrade procedures. No effective mitigations meeting Red Hat's criteria are currently available other than applying the official update.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2025:13848
Cve Count
2
Additional Cves
["CVE-2025-22869"]

Threat ID: 6a160976e29bf47b50640936

Added to database: 05/26/2026, 20:58:30 UTC

Last enriched: 08/14/2026, 22:28:05 UTC

Last updated: 09/10/2026, 22:04:10 UTC

Views: 64

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses