Red Hat Security AdvisoryRHSA-2025:9278
OpenShift Container Platform 4.19.1 bug fix and security update
Released 2025-06-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 openshift4/aws-karpenter-provider-aws-rhel9, openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9 +47
Fixes 7 records
Priority HIGH 67
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00842 · Published 2025-04-08 · Partial fix · 1.23.8, 1.24.2 +1 CWE-1395
Priority MEDIUM 45
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01178 · Published 2025-02-18 · Partial fix · 2.12.10, 2.13.6 CWE-416
Priority LOW 37
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00265 · Published 2025-01-26 · Partial fix · 2.11.0 CWE-416
Priority LOW 36
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00385 · Published 2025-02-18 · Partial fix · 2.12.10, 2.13.6 CWE-121
Priority LOW 36
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00358 · Published 2025-03-14 · Partial fix · 1.1.43 CWE-416
Priority LOW 34
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00576 · Published 2024-12-31 · Partial fix · v4.12.0-202506062300.p0.gb870fc6.assembly.stream.el8, v4.13.0-202507061330.p0.g9abb220.assembly.stream.el8 +165 CWE-732
THREATIST.IORead the docs