Read the docs
Red Hat Security Advisory

RHSA-2025:2701

OpenShift Container Platform 4.13.56 bug fix and security update

Released 2025-03-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2024-35666 CVE-2024-53197 · GHSA-5244-qm9f-xx43

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04117 Published 2024-12-27 Fixed in 4.19.325, 5.4.287 +7 CWE-787
TI-2024-35574 CVE-2024-53104 · GHSA-fg92-6xpx-v2x4

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were n…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03395 Published 2024-12-02 Partial fix · 4.19.324, 5.4.286 +7 CWE-787
TI-2024-33743 CVE-2024-50302 · GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

Priority HIGH 82KEV

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00811 Published 2024-11-19 Partial fix · 3.11, 3.12 +8 CWE-908
TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq

Rsync: info leak via uninitialized stack contents

Priority HIGH 72

A flaw was found in rsync which could be triggered when rsync compares file checksums.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08641 Published 2025-01-14 Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
TI-2024-37146 CVE-2024-56171 · GHSA-m366-8h8r-6fqr

Use after free in xmlsoft libxml2

Priority MEDIUM 45

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01178 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-416
TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Priority LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269
TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

Priority LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Priority LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333