Red Hat Security AdvisoryRHSA-2025:3775
OpenShift Container Platform 4.18.9 bug fix and security update
Released 2025-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 openshift4/azure-kms-encryption-provider-rhel9, openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-agent-installer-orchestrator-rhel9 +4
Fixes 7 records
Priority MEDIUM 62
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-03-17 · Partial fix · 0.8.1, 0.9.1 CWE-200
Priority MEDIUM 55
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16015 · Published 2025-01-29 · Partial fix CWE-405
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 37
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-01-26 · Partial fix · 2.11.0 CWE-416
Priority LOW 36
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00385 · Published 2025-02-18 · Partial fix · 2.12.10, 2.13.6 CWE-121
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00399 · Published 2025-02-24 · Partial fix · 4.0.5, 3.0.4 CWE-770
Priority LOW 27
Jinja is an extensible templating engine.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00507 · Published 2025-03-05 · Partial fix · 3.1.6 CWE-1336
THREATIST.IORead the docs