Red Hat Security AdvisoryRHSA-2025:4409
OpenShift Container Platform 4.12.76 bug fix and security update
Released 2025-05-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-baremetal-rhel8-operator, openshift4/ose-ibm-vpc-block-csi-driver-rhel8 +2
Fixes 5 records
Priority CRITICAL 94KEV
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.27775 · Published 2025-03-11 · Partial fix CWE-787
Priority CRITICAL 88KEV
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traver…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01354 · Published 2024-12-24 · Fixed in 4.20, 5.4 +8 CWE-125
Priority MEDIUM 62
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-03-17 · Partial fix · 0.8.1, 0.9.1 CWE-200
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 37
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-01-26 · Partial fix · 2.11.0 CWE-416
THREATIST.IORead the docs