RHSA-2025:3053: Important: Gatekeeper v3.15.4
Gatekeeper v3.15.4Gatekeeper is a validating webhook with auditing capabilities that canenforce custom resource definition-based policies that are run with theOpen Policy Agent (OPA). Gatekeeper is supported through a Red Hat AdvancedCluster Management for Kubernetes subscription.Starting in v3.15, the following namespaces are exempt from admission control: kube- multicluster-engine hypershift hive rhacs-operator open-cluster- openshift- To disable the default exempt namespaces, set the namespaces you want on theobject.Security fix(es): golang.org/x/oauth2: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (CVE-2025-22868) golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) Additional Release Notes: v3.15.0 https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.15.0 v3.15.1 https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.15.1
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:3053?
The severity of RHSA-2025:3053 is classified as moderate.
How do I fix RHSA-2025:3053?
To fix RHSA-2025:3053, update your Open Policy Agent Gatekeeper to the latest version following the provided security advisory instructions.
What systems are affected by RHSA-2025:3053?
RHSA-2025:3053 affects versions of Open Policy Agent Gatekeeper prior to the latest patched release.
What are the potential impacts of RHSA-2025:3053?
The potential impacts of RHSA-2025:3053 include security vulnerabilities that may allow unauthorized access to Kubernetes resources.
Is there a workaround for RHSA-2025:3053?
Currently, there is no official workaround for RHSA-2025:3053; the recommended action is to apply the security update.