Redhat Openshift Container Platform For Linuxone vulnerabilities

• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 more Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) CVE-2024-9676 Fix available 6.5 MediumOctober 15, 2024
• red hat build of keycloak, build of keycloak 22, build of keycloak 24 +13 more +15 more Keycloak: vulnerable redirect uri validation results in open redirec CVE-2024-8883 Fix available 6.1 MediumSeptember 19, 2024
• redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 more Keycloak: potential bypass of brute force protection CVE-2024-4629 Fix available 6.5 MediumSeptember 3, 2024
• redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 more Keycloak: path transversal in redirection validation CVE-2024-1132 Fix available 8.1 HighApril 17, 2024
• red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 more Kubevirt-csi: persistentvolume allows access to hcp's root node CVE-2024-1725 Fix available 6.5 MediumMarch 7, 2024
• netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 more Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 more Keycloak: redirect_uri validation bypass CVE-2023-6291 Fix available 7.1 HighDecember 21, 2023
• red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 more Python-eventlet: patch regression for cve-2021-21419 in some red hat builds CVE-2023-5625 Fix available 5.3 MediumOctober 27, 2023
• redhat single sign-on, red hat single sign-on 7, rhel-8 based middleware containers +4 more +6 more Rhsso-container-image: unsecured management interface exposed to adjecent network CVE-2022-4039 8.0 HighSeptember 22, 2023
• redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 more Ocp & fips mode CVE-2023-3089 Fix available 7.0 HighJuly 5, 2023
• red hat single sign-on 7, single sign-on 7.6 for rhel 7, single sign-on 7.6 for rhel 8 +7 more +9 more Keycloak: client access via device auth request spoof CVE-2023-2585 Fix available 3.5 LowJune 30, 2023
• redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 more Cri-o: /etc/passwd tampering privesc CVE-2022-4318 Fix available 7.8 HighDecember 29, 2022
• redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +9 more +11 more Keycloak: session takeover with oidc offline refreshtokens CVE-2022-3916 Fix available 6.8 MediumDecember 13, 2022
• gpgme project gpgme, fedoraproject fedora, redhat enterprise linux for ibm z systems +6 more +8 more GPGME Go wrapper contains Use After Free CVE-2020-8945 Fix available 7.5 HighFebruary 12, 2020