Red Hat Red Hat OpenShift Container Platform 4

• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-9615 Low 3.3 Networkmanager: networkmanager file access 0.2%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14443 Medium 6.4 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism 0.3%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-54770 Medium 4.9 Grub2: use-after-free in net_set_vlan 0.2%
• CVE-2025-61664 Medium 4.9 Grub2: missing unregister call for normal_exit command may lead to use-after-free 0.1%
• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2025-10230 Critical 10.0 Samba: command injection in wins server hook script 39.8%
• CVE-2025-12464 Medium 6.2 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 0.2%
• CVE-2025-11568 Medium 4.4 Luksmeta: data corruption when handling luks1 partitions with luksmeta 0.1%
• CVE-2025-9640 Medium 4.3 Samba: vfs_streams_xattr uninitialized memory write possible 0.5%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-8277 Low 3.1 Libssh: memory exhaustion via repeated key exchange in libssh 0.4%
• CVE-2025-4877 Medium 4.5 Libssh: write beyond bounds in binary to base64 conversion functions 0.2%
• CVE-2025-4437 Medium 5.7 Cri-o: large /etc/passwd file may lead to denial of service 0.2%
• CVE-2025-8283 Low 3.7 Netavark: podman: netavark may resolve hostnames to unexpected hosts 0.4%
• CVE-2025-5449 Medium 6.5 Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service 1.0%
• CVE-2025-8114 Medium 4.7 Libssh: null pointer dereference in libssh kex session id calculation 0.3%
• CVE-2025-4878 Low 3.6 Libssh: use of uninitialized variable in privatekey_from_file() 0.2%
• CVE-2025-7519 Medium 6.7 Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write 0.2%
• CVE-2025-6395 Medium 6.5 Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 0.8%
• CVE-2025-7424 High 7.5 Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes 1.3%
• CVE-2025-32990 Medium 6.5 Gnutls: vulnerability in gnutls certtool template parsing 0.9%
• CVE-2025-32989 Medium 5.3 Gnutls: vulnerability in gnutls sct extension parsing 1.5%
• CVE-2025-32988 Medium 6.5 Gnutls: vulnerability in gnutls othername san export 1.5%
• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-5351 Medium 6.5 Libssh: double free vulnerability in libssh key export functions 0.6%
• CVE-2025-5372 Medium 5.0 Libssh: incorrect return code handling in ssh_kdf() in libssh 0.5%
• CVE-2025-6032 High 8.3 Podman: podman missing tls verification 0.5%
• CVE-2025-5918 Low 3.9 Libarchive: reading past eof may be triggered for piped file streams 0.4%
• CVE-2025-5917 Low 2.8 Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c 0.2%
• CVE-2025-5916 Low 3.9 Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c 0.2%
• CVE-2025-5915 Medium 6.6 Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c 0.2%
• CVE-2025-5791 High 7.1 Users: `root` appended to group listings 0.2%
• CVE-2025-0620 Medium 4.9 Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session 0.8%
• CVE-2025-4598 Medium 4.7 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 1.3%
• CVE-2025-5278 Medium 4.4 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 0.3%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2025-4574 Medium 6.5 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 0.6%
• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-4382 Medium 5.9 Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 0.4%