Red Hat Security AdvisoryRHSA-2025:4177
OpenShift Container Platform 4.14.51 bug fix and security update
Released 2025-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-baremetal-rhel8-operator, openshift4/ose-cluster-etcd-rhel8-operator +4
Fixes 4 records
Priority CRITICAL 88KEV
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traver…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01354 · Published 2024-12-24 · Fixed in 4.20, 5.4 +8 CWE-125
Priority MEDIUM 62
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-03-17 · Partial fix · 0.8.1, 0.9.1 CWE-200
Priority MEDIUM 41
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00926 · Published 2024-02-21 · Partial fix · 3.14.2 CWE-457
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
