Threats Tagged 'cve-2025-53547'

Red Hat OpenShift Container Platform 4. 13. 61 includes security updates addressing two vulnerabilities: CVE-2025-30204, involving excessive memory allocation during JWT header parsing in the golang-jwt/jwt library, and CVE-2025-53547, a code execution vulnerability in Helm Chart. Red Hat has released updated RPM packages and container images to fix these issues. The vendor rates the overall security impact of this update as Low, despite the individual CVE severity being high. Users of OpenShift Container Platform 4. 13 are advised to upgrade to the updated packages and images via the appropriate release channels using the OpenShift CLI or web console. Detailed upgrade instructions are provided by Red Hat. No known exploits in the wild have been reported for these vulnerabilities. The patch status is confirmed as available through this advisory.

Red Hat OpenShift Container Platform 4. 20. 0 includes multiple security fixes addressing vulnerabilities such as credential overwriting, code execution in Helm charts, denial of service in SSH key exchange, and log file creation issues. These vulnerabilities affect core components like the openshift-controller-manager, Helm, golang. org/x/crypto/ssh, and github. com/golang/glog. Red Hat has released updated container images and packages to remediate these issues. Users of OpenShift Container Platform 4. 20 are advised to upgrade to the updated packages and images via the official release channels using the OpenShift CLI or web console. Detailed upgrade instructions are provided in Red Hat's documentation.

Red Hat Advanced Cluster Management for Kubernetes version 2. 14. 2 includes a security update addressing multiple vulnerabilities. This update provides new features, enhancements, bug fixes, and updated container images. The advisory references seven CVEs affecting the product, covering issues such as unauthorized changes in immutable fields, crash loops, and status reporting errors. No known exploits are reported in the wild. The update is classified as important and high severity by Red Hat Product Security.