Red Hat Security Advisory

RHSA-2025:2754

Red Hat OpenShift Builds 1.3

Released 2025-03-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Builds for Red Hat OpenShift 1.3.2 registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9, registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9

Fixes 2 records

TI-2025-01064 CVE-2025-1244 · GHSA-gghq-qp34-gqg8

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

MEDIUM 45

A command injection flaw was found in the text editor Emacs.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02632 Published 2025-02-12 Partial fix · 29.4.0, 1:24.3-23.el7_9.2 +10 CWE-78

TI-2024-11859 CVE-2024-12797 · GHSA-79v4-65xg-pq4g

RFC7250 handshakes with unauthenticated servers don't abort as expected

LOW 38

Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verificat…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01857 Published 2025-02-11 Partial fix · 3.4.1, 3.3.3 +2 CWE-392