RHSA-2025:14048 - Security Advisory

Topic

The components for Red Hat OpenShift for Windows Containers 10.19.0 are now available

Description

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers.

Solution

For Windows Machine Config Operator upgrades, see the following documentation: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/windows_container_support_for_openshift/windows-node-upgrades

Affected Products

• Red Hat OpenShift for Windows Containers

Fixes

• WINC-1189 - Ensure azure Windows VMs do not require outbound access to the internet to be configured as a Node
• WINC-926 - Fix how kubelet handles OS specific configuration
• OCPBUGS-47696 - Use of optional_namespaces in the ImageTagMirrorSet does not work as documented
• OCPBUGS-56131 - Azure Machines inaccessible by SSH
• OCPBUGS-54499 - Can't install WMCO 10.19 failed to parse MachineConfig ignition: unsupported config version
• OCPBUGS-52423 - CI: stopPacketTrace fails in TestWMCO/network test due to an unexpected error
• WINC-1373 - Adjust kubelet on Windows hosts to reserve at least 2GiB of memory
• OCPBUGS-1721 - [WMCO] WICD logging issue resolving PowerShell variable: could not resolve PowerShell variable ENDPOINT_IP: error running command with output New-HnsEndpoint
• OCPBUGS-35285 - Version annotation removal results in unusable node
• WINC-1374 - Explicitly set hard-eviction thresholds with Windows signals in kubelet configuration
• WINC-1383 - Increase memory for WMCO konflux tasks that are being OOM killed
• OCPBUGS-53143 - Flaw in AWS client encryption detected in clair scan
• WINC-1380 - Update Konflux with Shell and Unicode SAST scanners

CVEs

• CVE-2025-22869
• CVE-2025-30204

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/windows_container_support_for_openshift/index