Read the docs
Red Hat Security Advisory

RHSA-2025:3301

OpenShift Container Platform 4.16.38 bug fix and security update

Released 2025-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2024-35666 CVE-2024-53197 · GHSA-5244-qm9f-xx43

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04117 Published 2024-12-27 Fixed in 4.19.325, 5.4.287 +7 CWE-787
TI-2024-33743 CVE-2024-50302 · GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

Priority HIGH 82KEV

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00811 Published 2024-11-19 Partial fix · 3.11, 3.12 +8 CWE-908
TI-2024-37146 CVE-2024-56171 · GHSA-m366-8h8r-6fqr

Use after free in xmlsoft libxml2

Priority MEDIUM 45

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01178 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-416
TI-2025-18627 CVE-2025-24928 · GHSA-fgfv-9xqc-v794

Stack-based buffer overflow in xmlsoft libxml2

Priority LOW 36

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00385 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-121
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78

Go JOSE's Parsing Vulnerable to Denial of Service

Priority LOW 35

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00399 Published 2025-02-24 Partial fix · 4.0.5, 3.0.4 CWE-770
TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

Priority LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

Priority LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22