Red Hat Security AdvisoryRHSA-2025:3798
OpenShift Container Platform 4.17.25 bug fix and security update
Released 2025-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/azure-kms-encryption-provider-rhel9, openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-aws-cluster-api-controllers-rhel9 +2
Fixes 4 records
Priority MEDIUM 62
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-03-17 · Partial fix · 0.8.1, 0.9.1 CWE-200
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 39
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00365 · Published 2025-01-22 · Partial fix · 1.33.12, 1.35.5 +197 CWE-269
Priority LOW 37
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-01-26 · Partial fix · 2.11.0 CWE-416
THREATIST.IORead the docs