Red Hat Security Advisory

RHSA-2025:2445

OpenShift Container Platform 4.17.20 bug fix and security update

Released 2025-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift4/ose-docker-builder-rhel9, openshift4/ose-operator-framework-tools-rhel9, openshift4/ose-operator-lifecycle-manager-rhel9 +2

Fixes 3 records

TI-2024-33743 CVE-2024-50302 · GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

HIGH 82KEV

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00811 Published 2024-11-19 Partial fix · 3.11, 3.12 +8 CWE-908

TI-2025-18656 CVE-2025-24976

Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT

HIGH 68

Distribution is a toolkit to pack, ship, store, and deliver container content.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00353 Published 2025-02-11 Partial fix CWE-639

TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22