Red Hat Security Advisory

RHSA-2025:3297

OpenShift Container Platform 4.17.23 bug fix and security update

Released 2025-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 rhcos

Fixes 3 records

TI-2025-00524 CVE-2025-0624 · GHSA-q3rr-g46f-jgqr

Grub2: net: out-of-bounds write in grub_net_search_config_file()

LOW 38

A flaw was found in grub2.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.01405 Published 2025-02-19 Fixed in 1:2.02-0.87.el7_9.15, 1:2.02-162.el8_10 +15 CWE-787

TI-2025-18627 CVE-2025-24928 · GHSA-fgfv-9xqc-v794

Stack-based buffer overflow in xmlsoft libxml2

LOW 36

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00385 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-121

TI-2024-08048 CVE-2024-8676 · GHSA-7p9f-6x8j-gxxp

Cri-o: checkpoint restore can be triggered from different namespaces

LOW 36

A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0075 Published 2024-11-26 Partial fix · 1.29.11, 1.30.8 +7 CWE-285