Red Hat Security Advisory

RHSA-2025:1386

OpenShift Container Platform 4.16.35 security update

Released 2025-02-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-operator-marketplace-rhel9, rhcos

Fixes 2 records

TI-2024-35574 CVE-2024-53104 · GHSA-fg92-6xpx-v2x4

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were n…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03395 Published 2024-12-02 Partial fix · 4.19.324, 5.4.286 +7 CWE-787

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333