Red Hat Security AdvisoryRHSA-2025:21913
OpenShift File Integrity Operator bug fix and enhancement update
Released 2025-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
Fixes 6 records
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.73452 · Published 2025-07-15 · Partial fix · 3.50.2 CWE-197
Priority HIGH 69
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00444 · Published 2025-07-10 · Partial fix · 2.15.2, 1.1.39-8.el10_0 +42 CWE-416
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00491 · Published 2025-06-09 · Partial fix · 3.8.0, 3.7.7-4.el10_0 +48 CWE-190
Priority MEDIUM 61
AIDE is an advanced intrusion detection environment.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-08-14 · Partial fix · 0.19.2 CWE-117
Priority MEDIUM 48
A vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01558 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +34 CWE-125
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00833 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +33 CWE-825