Red Hat Security AdvisoryRHSA-2025:4019
OpenShift Container Platform 4.18.10 bug fix and security update
Released 2025-04-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 openshift4/ose-ibm-vpc-block-csi-driver-rhel9, openshift4/ose-monitoring-plugin-rhel9, openshift4/ose-operator-registry-rhel9 +1
Fixes 4 records
Priority CRITICAL 88KEV
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traver…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01354 · Published 2024-12-24 · Fixed in 4.20, 5.4 +8 CWE-125
Priority MEDIUM 48
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0068 · Published 2024-03-03 · Partial fix CWE-200
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 34
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00894 · Published 2024-09-16 · Partial fix · 2.5.4, 3.1.3 CWE-1333
