Read the docs
Red Hat Security Advisory

RHSA-2025:2710

OpenShift Container Platform 4.14.49 bug fix and security update

Released 2025-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

TI-2024-35666 CVE-2024-53197 · GHSA-5244-qm9f-xx43

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04117 Published 2024-12-27 Fixed in 4.19.325, 5.4.287 +7 CWE-787
TI-2024-33743 CVE-2024-50302 · GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

Priority HIGH 82KEV

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00811 Published 2024-11-19 Partial fix · 3.11, 3.12 +8 CWE-908
TI-2024-10362 CVE-2024-11187 · GHSA-w8w2-83mf-6cp5

Many records in the additional section cause CPU exhaustion

Priority MEDIUM 55

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16015 Published 2025-01-29 Partial fix CWE-405
TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Priority LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269
TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

Priority LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Priority LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

Priority LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22