RHSA-2025:21885 - Security Advisory

标题

An updated OpenShift Compliance Operator image that fixes various bugs and adds new
enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.

描述

The OpenShift Compliance Operator v1.8.0 is now available.
See the documentation for bug fix information:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/compliance-operator#compliance-operator-release-notes

解决方案

Before applying this update, make sure all previously released errata relevant to your
system have been applied. For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html

修复

• https://issues.redhat.com/browse/CMP-3248
• https://issues.redhat.com/browse/CMP-3553
• https://issues.redhat.com/browse/CMP-3557
• https://issues.redhat.com/browse/CMP-3558
• https://issues.redhat.com/browse/CMP-3571
• https://issues.redhat.com/browse/CMP-3581
• https://issues.redhat.com/browse/CMP-3582
• https://issues.redhat.com/browse/CMP-3591
• https://issues.redhat.com/browse/CMP-3597
• https://issues.redhat.com/browse/CMP-3606
• https://issues.redhat.com/browse/CMP-3613
• https://issues.redhat.com/browse/CMP-3731
• https://issues.redhat.com/browse/CMP-3733
• https://issues.redhat.com/browse/CMP-3767
• https://issues.redhat.com/browse/CMP-3915
• https://issues.redhat.com/browse/CMP-3916
• https://issues.redhat.com/browse/CMP-3920

CVE

• CVE-2024-12085
• CVE-2025-5914
• CVE-2025-6020
• CVE-2025-6965
• CVE-2025-7195
• CVE-2025-7425
• CVE-2025-8941

参考

• https://access.redhat.com/security/updates/classification/