Get real-time updates on Telegram
P5Verified
Red Hat Security Advisory: OpenShift Container Platform 4.14.59 packages and security update
CVE-2025-22871, CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 affects containernetworking-plugins. EPSS 0.00811 (percentile 0.55484), scored 2026-10-03. Fixed version: 1:1.4.0-5.rhaos4.14.el8. Fixed version: 1:1.4.0-5.rhaos4.14.el8. Fixed version: 1:1.4.0-5.rhaos4.14.el8. Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8. Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8. Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8. Fixed version: 0:1.27.0-7.el8. Fixed version: 0:1.27.0-7.el8. Fixed version: 0:1.27.0-7.el8. Fixed version: 2:1.11.3-5.rhaos4.14.el8.
- CVE
- CVE-2025-22871, CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
- Product
- containernetworking-plugins
- CCR priority
- 0.2 /100 (P5)
- CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H · OSV.dev
- EPSS
- 0.00811 · percentile 0.55484 · 2026-10-03
- KEV
- no
Affected products
- containernetworking-plugins · Fixed version: 1:1.4.0-5.rhaos4.14.el8
- containernetworking-plugins-debuginfo · Fixed version: 1:1.4.0-5.rhaos4.14.el8
- containernetworking-plugins-debugsource · Fixed version: 1:1.4.0-5.rhaos4.14.el8
- cri-o · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8
- cri-o-debuginfo · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8
- cri-o-debugsource · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el8
- cri-tools · Fixed version: 0:1.27.0-7.el8
- cri-tools-debuginfo · Fixed version: 0:1.27.0-7.el8
- cri-tools-debugsource · Fixed version: 0:1.27.0-7.el8
- skopeo · Fixed version: 2:1.11.3-5.rhaos4.14.el8
- skopeo-debuginfo · Fixed version: 2:1.11.3-5.rhaos4.14.el8
- skopeo-debugsource · Fixed version: 2:1.11.3-5.rhaos4.14.el8
- skopeo-tests · Fixed version: 2:1.11.3-5.rhaos4.14.el8
- cri-o · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el9
- cri-o-debuginfo · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el9
- cri-o-debugsource · Fixed version: 0:1.27.8-16.rhaos4.14.gite1422c1.el9
- cri-tools · Fixed version: 0:1.27.0-7.el9
- cri-tools-debuginfo · Fixed version: 0:1.27.0-7.el9
- cri-tools-debugsource · Fixed version: 0:1.27.0-7.el9
- skopeo · Fixed version: 2:1.11.3-5.rhaos4.14.el9
- skopeo-debuginfo · Fixed version: 2:1.11.3-5.rhaos4.14.el9
- skopeo-debugsource · Fixed version: 2:1.11.3-5.rhaos4.14.el9
- skopeo-tests · Fixed version: 2:1.11.3-5.rhaos4.14.el9
- runc · Fixed version: 4:1.2.5-2.rhaos4.17.el8
- runc-debuginfo · Fixed version: 4:1.2.5-2.rhaos4.17.el8
- runc-debugsource · Fixed version: 4:1.2.5-2.rhaos4.17.el8
- runc · Fixed version: 4:1.2.5-2.rhaos4.17.el9
- runc-debuginfo · Fixed version: 4:1.2.5-2.rhaos4.17.el9
- runc-debugsource · Fixed version: 4:1.2.5-2.rhaos4.17.el9
Provenance
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-22871.html