Red Hat Security AdvisoryRHSA-2025:21885
OpenShift Compliance Operator bug fix and enhancement update
Released 2025-11-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-content-rhel8, registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-openscap-rhel8 +1
Fixes 7 records
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.73452 · Published 2025-07-15 · Partial fix · 3.50.2 CWE-197
Priority HIGH 72
A flaw was found in rsync which could be triggered when rsync compares file checksums.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08641 · Published 2025-01-14 · Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
Priority HIGH 69
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00444 · Published 2025-07-10 · Partial fix · 2.15.2, 1.1.39-8.el10_0 +42 CWE-416
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00491 · Published 2025-06-09 · Partial fix · 3.8.0, 3.7.7-4.el10_0 +48 CWE-190
Priority LOW 36
A flaw was found in linux-pam.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2025-08-13 · Fixed in 1.1.8-23.el7_9.2, 1.3.1-38.el8_10 +19 CWE-22
Priority LOW 36
A flaw was found in linux-pam.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00472 · Published 2025-06-17 · Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00243 · Published 2025-08-07 · Partial fix · 0.15.2, v4.17.39-2 +119 CWE-276