Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-6395	Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()	6.5 Medium	Jul 10, 2025
CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	7.5 High	Jul 10, 2025
CVE-2025-7425	Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr	7.8 High	Jul 10, 2025
CVE-2025-32990	Gnutls: vulnerability in gnutls certtool template parsing	6.5 Medium	Jul 10, 2025
CVE-2025-32989	Gnutls: vulnerability in gnutls sct extension parsing	5.3 Medium	Jul 10, 2025
CVE-2025-32988	Gnutls: vulnerability in gnutls othername san export	6.5 Medium	Jul 10, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025
CVE-2025-5372	Libssh: incorrect return code handling in ssh_kdf() in libssh	5.0 Medium	Jul 4, 2025
CVE-2025-5318	Libssh: out-of-bounds read in sftp_handle()	5.4 Medium	Jun 24, 2025
CVE-2025-6032	A flaw was found in Podman	8.3 High	Jun 24, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6170	A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files	2.5 Low	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6021	Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	7.5 High	Jun 12, 2025
CVE-2025-5914	Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	7.8 High	Jun 9, 2025
CVE-2025-5918	A vulnerability has been identified in the libarchive library	3.9 Low	Jun 9, 2025
CVE-2025-5917	A vulnerability has been identified in the libarchive library	2.8 Low	Jun 9, 2025
CVE-2025-5916	A vulnerability has been identified in the libarchive library	3.9 Low	Jun 9, 2025
CVE-2025-5915	A vulnerability has been identified in the libarchive library	6.6 Medium	Jun 9, 2025
CVE-2025-5791	Users: `root` appended to group listings	7.1 High	Jun 6, 2025
CVE-2025-0620	Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session	4.9 Medium	Jun 6, 2025
CVE-2025-4598	Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump	4.7 Medium	May 30, 2025
CVE-2025-5278	Coreutils: heap buffer under-read in gnu coreutils sort via key specification	4.4 Medium	May 27, 2025
CVE-2025-5222	Icu: stack buffer overflow in the srbroot::addtag function	7.0 High	May 27, 2025

Other Red Hat products