This security advisory from Red Hat Product Security covers vulnerabilities in Red Hat OpenShift Builds, specifically version 1.7.0, recommending an upgrade to 1.7.1. The issues fixed include a missing clusterrole referenced by a clusterrolebinding and incorrect operator documentation links. The advisory references CVE-2025-61728 and CVE-2025-66471 but does not provide detailed CVSS metrics or technical exploitation details. The update is classified as important and addresses security concerns in the OpenShift Builds product line.

The vulnerabilities addressed could potentially affect the security posture of Red Hat OpenShift Builds 1.7.0 installations, possibly impacting cluster role bindings and operator documentation accuracy. The advisory classifies the severity as high, indicating significant security concerns, but no known exploits in the wild have been reported. The exact impact on confidentiality, integrity, or availability is not detailed in the provided information.

Red Hat recommends upgrading existing Red Hat OpenShift Builds installations from version 1.7.0 to 1.7.1 to remediate the identified vulnerabilities. No additional mitigation steps or temporary workarounds are specified. Since this is a traditional software product (not a cloud service), users must apply the update manually. Patch status is confirmed by the vendor advisory indicating the availability of version 1.7.1 as the fixed release.