Red Hat Security Advisory

RHSA-2025:3573

OpenShift Container Platform 4.12.75 packages and security update

Released 2025-04-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-docker-builder +5

Fixes 7 records

TI-2025-20210 CVE-2025-27363 · GHSA-g8qj-jv5h-78cp

Out-of-bounds write in FreeType

CRITICAL 94KEV

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.27775 Published 2025-03-11 Partial fix CWE-787

TI-2024-35666 CVE-2024-53197 · GHSA-5244-qm9f-xx43

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04117 Published 2024-12-27 Fixed in 4.19.325, 5.4.287 +7 CWE-787

TI-2024-37146 CVE-2024-56171 · GHSA-m366-8h8r-6fqr

Use after free in xmlsoft libxml2

MEDIUM 45

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01178 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-416

TI-2025-00524 CVE-2025-0624 · GHSA-q3rr-g46f-jgqr

Grub2: net: out-of-bounds write in grub_net_search_config_file()

LOW 38

A flaw was found in grub2.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.01405 Published 2025-02-19 Fixed in 1:2.02-0.87.el7_9.15, 1:2.02-162.el8_10 +15 CWE-787

TI-2025-18627 CVE-2025-24928 · GHSA-fgfv-9xqc-v794

Stack-based buffer overflow in xmlsoft libxml2

LOW 36

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00385 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-121

TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333