Red Hat Security AdvisoryRHSA-2025:14818
OpenShift Container Platform 4.18.23 bug fix and security update
Released 2025-09-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202508261658-0, rhcos-ppc64le-418.94.202508261658-0, rhcos-s390x-418.94.202508261658-0 +1
Fixes 3 records
Priority HIGH 69
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00444 · Published 2025-07-10 · Partial fix · 2.15.2, 1.1.39-8.el10_0 +42 CWE-416
Priority HIGH 66
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2025-04-17 · Partial fix · 2.13.8, 2.14.2 CWE-1284
Priority HIGH 66
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00384 · Published 2025-04-08 · Partial fix · 2.13.8, 2.14.2 CWE-393
THREATIST.IORead the docs