Red Hat Security AdvisoryRHSA-2025:2441
OpenShift Container Platform 4.12.74 bug fix and security update
Released 2025-03-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-docker-builder +2
Fixes 5 records
Priority HIGH 82KEV
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00811 · Published 2024-11-19 · Partial fix · 3.11, 3.12 +8 CWE-908
Priority HIGH 72
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.18923 · Published 2024-01-31 · Partial fix · 1.1.12 CWE-403
Priority MEDIUM 55
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16015 · Published 2025-01-29 · Partial fix CWE-405
Priority LOW 39
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00365 · Published 2025-01-22 · Partial fix · 1.33.12, 1.35.5 +197 CWE-269
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333