Red Hat Security AdvisoryRHSA-2025:15397
OpenShift Container Platform 4.20.0 bug fix and security update
Released 2025-10-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202509251656-0, rhcos-ppc64le-4.20.9.6.202509251656-0, rhcos-s390x-4.20.9.6.202509251656-0 +1
Fixes 6 records
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.73452 · Published 2025-07-15 · Partial fix · 3.50.2 CWE-197
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00491 · Published 2025-06-09 · Partial fix · 3.8.0, 3.7.7-4.el10_0 +48 CWE-190
Priority MEDIUM 48
A vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01558 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +34 CWE-125
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00833 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +33 CWE-825
Priority MEDIUM 43
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-07-16 · Partial fix · 1.23.0 CWE-349
Priority LOW 39
A flaw was found in Podman.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00515 · Published 2025-06-24 · Partial fix · 5.5.2, 6:5.4.0-12.el10_0 +12 CWE-295