Red Hat Security AdvisoryRHSA-2025:4431
OpenShift Container Platform 4.17.28 bug fix and security update
Released 2025-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/ose-olm-operator-controller-rhel9, rhcos
Fixes 3 records
Priority HIGH 67
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority LOW 36
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority LOW 27
Jinja is an extensible templating engine.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00507 · Published 2025-03-05 · Partial fix · 3.1.6 CWE-1336
