Red Hat Security AdvisoryRHSA-2025:4731
OpenShift Container Platform 4.16.40 bug fix and security update
Released 2025-05-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.16 openshift4/driver-toolkit-rhel9, openshift4/network-tools-rhel9, openshift4/openshift-route-controller-manager-rhel9 +30
Fixes 5 records
Priority HIGH 67
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00939 · Published 2025-02-26 · Partial fix · 0.35.0 CWE-770
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 37
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-01-26 · Partial fix · 2.11.0 CWE-416
Priority LOW 36
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
THREATIST.IORead the docs