Skip to content
OpenAdvisories
Medium RHSA-2025:3061 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.17.22 packages and security update

Published Mar 27, 2025 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.17::el8 podman 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-catatonit 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-catatonit-debuginfo 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-debuginfo 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-debugsource 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-docker 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-gvproxy 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-gvproxy-debuginfo 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-plugins 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-plugins-debuginfo 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-remote 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-remote-debuginfo 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 podman-tests 5:5.2.2-4.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 skopeo 2:1.16.1-1.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el8 skopeo-tests 2:1.16.1-1.rhaos4.17.el8
Red Hat · OpenShift 4 openshift:4.17::el9 podman 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-debuginfo 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-debugsource 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-docker 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-plugins 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-plugins-debuginfo 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-remote 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-remote-debuginfo 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 podman-tests 5:5.2.2-4.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 skopeo 2:1.16.1-1.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 skopeo-debuginfo 2:1.16.1-1.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 skopeo-debugsource 2:1.16.1-1.rhaos4.17.el9
Red Hat · OpenShift 4 openshift:4.17::el9 skopeo-tests 2:1.16.1-1.rhaos4.17.el9

Vulnerabilities 1

  • Medium 6.6
    CVE-2025-27144

    Go JOSE's Parsing Vulnerable to Denial of Service

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to ve…

    go-jose go-jose zot kubescape Debian Ubuntu Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2347423
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3061.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-27144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-27144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-27144
  • article
    https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22
  • article
    https://github.com/go-jose/go-jose/releases/tag/v4.0.5
  • article
    https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78