Red Hat Red Hat OpenShift Container Platform 4.19

• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-5318 Medium 5.4 Libssh: out-of-bounds read in sftp_handle() 1.9%
• CVE-2025-6032 High 8.3 Podman: podman missing tls verification 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2024-45497 High 7.6 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials 0.6%