Red Hat Security Advisory: OpenShift Container Platform 4.17.32 bug fix and security update

Affected operating systems

• linux

  debian / debian_linux8.0

• linux

  redhat / enterprise_linux_desktop6.0

• linux

  redhat / enterprise_linux_desktop7.0

• linux

  redhat / enterprise_linux_eus7.4

• linux

  redhat / enterprise_linux_eus7.5

• linux

  redhat / enterprise_linux_server6.0

• linux

  redhat / enterprise_linux_server7.0

• linux

  redhat / enterprise_linux_workstation6.0

• linux

  redhat / enterprise_linux_workstation7.0

• linux

  opensuse / leap42.1

• linux

  opensuse / leap42.2

• linux

  opensuse / opensuse13.2

• linux

  canonical / ubuntu_linux16.04

• linux

  canonical / ubuntu_linux18.04

• macos

  apple / mac_os_x

• mobile

  apple / iphone_os

• other

  apple / tvos

• other

  apple / watchos

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

• boost

  boost1.78.0

• go

  github.com/openshift/console

• go

  golang.org/x/net

• go

  golang.org/x/oauth2

• nodejs

  node.js4.0.0 – 4.1.2

• nodejs

  node.js4.2.0 – 4.8.2

• nodejs

  node.js6.0.0 – 6.8.1

• nodejs

  node.js6.9.0 – 6.10.2

• nodejs

  node.js7.0.0 – 7.6.0

• oracle

  database_server

• oracle

  jdk

• oracle

  jre

• oracle

  mysql5.5.0 – 5.5.61

• oracle

  mysql5.6.0 – 5.6.41

• oracle

  mysql5.7.0 – 5.7.23

• oracle

  mysql8.0.0 – 8.0.12

• redhat

  satellite

• zlib

  zlib1.2.0.6 – 1.2.9

References & sources

• https://bugs.python.org/issue29169
  report
• https://access.redhat.com/errata/RHSA-2017:1221
  vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2017:1220
  vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2017:3047
  vendor-advisoryx_refsource_REDHAT
• http://www.openwall.com/lists/oss-security/2016/12/05/21
  mailing-listx_refsource_MLIST
• http://www.securityfocus.com/bid/95131
  vdb-entryx_refsource_BID
• https://access.redhat.com/errata/RHSA-2017:3046
  vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
  vendor-advisoryx_refsource_SUSE
• https://security.gentoo.org/glsa/201701-56
  vendor-advisoryx_refsource_GENTOO
• http://www.securitytracker.com/id/1039427
  vdb-entryx_refsource_SECTRACK
• https://access.redhat.com/errata/RHSA-2017:1222
  vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
  vendor-advisoryx_refsource_SUSE
• https://access.redhat.com/errata/RHSA-2017:3453
  vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
  vendor-advisoryx_refsource_SUSE
• https://access.redhat.com/errata/RHSA-2017:2999
  vendor-advisoryx_refsource_REDHAT
• https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html
  mailing-listx_refsource_MLIST
• https://usn.ubuntu.com/4246-1/
  vendor-advisoryx_refsource_UBUNTU
• https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html
  mailing-listx_refsource_MLIST
• https://usn.ubuntu.com/4292-1/
  vendor-advisoryx_refsource_UBUNTU
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
  x_refsource_CONFIRM

Linked CVEs

• CVE-2025-22868

  A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component.

  —
• CVE-2024-6538

  A flaw was found in OpenShift Console.

  mediumCVSSv3 5.3
• CVE-2024-45338

  A flaw was found in golang.org/x/net/html.

  —