RHSA-2026:6055HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.1

Published
March 30, 2026
Last Modified
September 4, 2026

🔗 CVE IDs covered (2)

CVE-2025-61728 →CVE-2025-66471 →

📋 Description

CVE-2025-61728 — golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data

🎯 Affected products38

  • Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:21220a0f9a84f3fbe84bcbfec888b80965be3b284f3ca844eef6cff2aa5a6623_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7f4ce86fbed5bbec3b72c4349431cca7697abf6e0eeb679b9498797edaae8286_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d738645b942c6c0e1c520581f6f9a7df2dd0414eef752b0b9ac7962a76d7f54f_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:ef05015ffdd2854c5c429c5bce82d0f4426651ed90b0eb5b400d61d17b75ec10_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:85cf28e3db1da731207ecc5c79b1234e86e25361635f5bb147cb497e958380a0_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:b092d22ddcfc3c9befc0bbc8004206f08ab70096444a595efa1f207438a1684b_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:d1296043ca33ac28a0d9d0335240a532636d64ff24823f6482958ac422eb532e_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e044fb9bfb436ca3239f97739a43b1e6325f735f9d36af6c6b5e23f8d4dcca4d_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:80c0fddab0b3a91af63907fd48cd48d070c331ee8780a4999375ad23395fbe69_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9bd19d5bdc46a2392f95584fb01da2902461b920a9e76e6d6a67d147988b3155_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:dc9109ea979f36701bd5785e600b3cfd0bdf4f908b15323b5364b77a27d0f03c_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:fd3767bcd2704dcb6cda3c9a2719760c110078851fe2243a98370d5dec9ad7b5_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:1570836451f9c0689ed3c0bcd09141fefee15279b0ca28f5c2a108c5993d36d7_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:40fe29e71e502dd10287d32ecff521228f44cd3e4dc6c60f339ef6d806ef6497_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d1b33abf5e172e302177cff1ae1113bba822692df53a1f265857ecf8ae8670a5_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:e7ec63ccd128c2a404c60ecbdd50e786e70ecd640953bd57a023931afd259b05_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:e393e5040d0a03b107b1afdd3b01c29dc2ec66b3bf297a9f8699c63a54fb6e26_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:34fe59d1b2eb33a700140df89b88cd854061db2a82fc1793b1e7ebdc50b521a4_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:648227c2be4f515f6c86184e09c60fe3799a727391d1020c4eee4d2cd8912dda_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7ac837f13c5878646f66013cf3fc5a7e607594942ca114027e9041708d83789d_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:f0744693ddb6e9c25d7b088d42881f8f42e0e3f537db88a62d4e5a92dea5230c_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:19f9361c334808b39276a59adbc42c9081eaaafcbb82837f47a4e7f8571270b0_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b43f176d6c32ec25b3bb4f578406e1a9dc40272e5174ee1f8ab56396a777e92c_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cdbb68894943114029cbbcd4aff51633c19304d95821810d96cc5eae85226667_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d103519435231fc5a5e7133f592282eaf82f7afffd2ffa27b56f7b352b455983_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:49abb5399d716db141b2dc765dc9cd67bd640a0a7ea04f20265a2a3cb4782246_s390x as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7c27882a711866f155b0c9525cb3ceb5315e1f276a724766b1912e3a95c0f2ec_amd64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:816dfe31bbd4ceff97c72269ff995bcac586c35cad43aa155190c2c753425302_arm64 as a component of Red Hat OpenShift Builds 1.7.4
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:da20dd0bba029f5f6ee92b147f4b6972ec35ba0b8188c549f5d54c255c4ffb0a_ppc64le as a component of Red Hat OpenShift Builds 1.7.4
  • +8 more not shown

✅ Remediation

It is recommended that existing users of Red Hat OpenShift Builds 1.7.0 upgrades to to 1.7.1 Workaround: To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)