Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-7519	Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	6.7 Medium	Jul 14, 2025
CVE-2025-6395	Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()	6.5 Medium	Jul 10, 2025
CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	7.5 High	Jul 10, 2025
CVE-2025-7425	Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr	7.8 High	Jul 10, 2025
CVE-2025-32990	Gnutls: vulnerability in gnutls certtool template parsing	6.5 Medium	Jul 10, 2025
CVE-2025-32989	Gnutls: vulnerability in gnutls sct extension parsing	5.3 Medium	Jul 10, 2025
CVE-2025-32988	Gnutls: vulnerability in gnutls othername san export	6.5 Medium	Jul 10, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025
CVE-2025-5372	Libssh: incorrect return code handling in ssh_kdf() in libssh	5.0 Medium	Jul 4, 2025
CVE-2025-5318	Libssh: out-of-bounds read in sftp_handle()	5.4 Medium	Jun 24, 2025
CVE-2025-6032	A flaw was found in Podman	8.3 High	Jun 24, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6170	Libxml2: stack buffer overflow in xmllint interactive shell command handling	2.5 Low	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6021	Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	7.5 High	Jun 12, 2025
CVE-2025-5914	Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	7.8 High	Jun 9, 2025
CVE-2025-5918	Libarchive: reading past eof may be triggered for piped file streams	3.9 Low	Jun 9, 2025
CVE-2025-5917	Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c	2.8 Low	Jun 9, 2025
CVE-2025-5916	Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c	3.9 Low	Jun 9, 2025
CVE-2025-5915	Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c	6.6 Medium	Jun 9, 2025
CVE-2025-5791	Users: `root` appended to group listings	7.1 High	Jun 6, 2025
CVE-2025-0620	Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session	4.9 Medium	Jun 6, 2025
CVE-2025-4598	Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump	4.7 Medium	May 30, 2025
CVE-2025-5278	Coreutils: heap buffer under-read in gnu coreutils sort via key specification	4.4 Medium	May 27, 2025

Other Red Hat products