Red Hat Security Advisory

RHSA-2025:11673

OpenShift Container Platform 4.19.6 bug fix and security update

Released 2025-07-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 openshift4/ose-aws-cluster-api-controllers-rhel9, rhcos

Fixes 2 records

TI-2025-05441 CVE-2025-6021 · GHSA-32vr-5hxf-x93f

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

HIGH 72

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01367 Published 2025-06-12 Partial fix · 2.14.4, 2.12.5-7.el10_0 +21 CWE-787

TI-2024-30409 CVE-2024-45339 · GHSA-6wxm-mpqj-6jpf

Vulnerability when creating log files in github.com/golang/glog

LOW 33

When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00318 Published 2025-01-28 Partial fix · 1.2.4 CWE-377