Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.17.26. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2025:4014
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/
Security Fix(es):
* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of
golang.org/x/crypto/ssh (CVE-2025-22869)
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header
parsing (CVE-2025-30204)
* kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock
sources (CVE-2024-53150)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.15.48. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2025:3057
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/
Security Fix(es):
* kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy
and Mbox devices (CVE-2024-53197)
* libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
* libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2
(CVE-2025-24928)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.
CVE-2025-30406 is a critical vulnerability in Gladinet CentreStack and Triofox involving the use of a hard-coded cryptographic key for ViewState integrity verification. This flaw allows attackers to forge ViewState payloads, leading to server-side deserialization and remote code execution. The vulnerability has a high CVSS score of 9.0 and is known to be exploited in the wild.
CVE-2025-29824 is a use-after-free vulnerability in the Microsoft Windows Common Log File System (CLFS) Driver. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been exploited in the wild, including use in known ransomware campaigns.
CVE-2025-31161 is a critical authentication bypass vulnerability in CrushFTP affecting the HTTP authorization header. It allows remote unauthenticated attackers to authenticate as any known or guessable user, including administrative accounts, potentially leading to full system compromise. The vulnerability has a very high CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns. No affected versions or patch information is provided in the available data.
CVE-2025-24813 is a critical vulnerability in Apache Tomcat affecting versions from 8.5.0 through 8.5.100, 9.0.0.M1 through 9.0.98, 10.1.0-M1 through 10.1.34, and 11.0.0-M1 through 11.0.2. It involves path equivalence issues with internal dots in file names handled by the default servlet when write and partial PUT support are enabled. Exploitation can lead to remote code execution, information disclosure, or malicious content injection. The vulnerability requires specific conditions such as enabled writes for the default servlet, partial PUT support, and knowledge of sensitive file names. Upgrading to Apache Tomcat versions 11.0.3, 10.1.35, or 9.0.99 or later mitigates the issue.
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.
This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2019-9875 is a deserialization vulnerability in Sitecore CMS and Experience Platform (XP) within the Sitecore.Security.AntiCSRF module. It allows an authenticated attacker to execute arbitrary code by sending a malicious serialized .NET object in the HTTP POST parameter __CSRFTOKEN. This vulnerability has been exploited in the wild and is considered high severity.
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.
The reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that causes exposed secrets to be dumped into GitHub Actions Workflow Logs. This vulnerability has been exploited in the wild, posing a high risk of secret leakage during automated workflows.
A critical stack-based buffer overflow vulnerability exists in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. This flaw allows a remote unauthenticated attacker to execute arbitrary code remotely. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The CVSS score is 9.0, indicating high severity with significant impact on confidentiality, integrity, and availability.
CVE-2017-12637 is a directory traversal vulnerability in SAP NetWeaver Application Server Java. It allows remote attackers to read arbitrary files by exploiting a '..' (dot dot) sequence in the query string of a specific JavaScript resource. This vulnerability has been exploited in the wild and is considered high severity.
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code.)
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests.
An out-of-bounds write vulnerability (CVE-2025-24201) was identified in WebKitGTK, the GTK port of the WebKit rendering engine. This vulnerability affects the webkit2gtk3 package used in Red Hat Enterprise Linux 9 and related distributions. The issue has been rated with high severity by the vendor. A security update addressing this vulnerability is available from Red Hat and SUSE. The vulnerability is classified under CWE-787 (Out-of-bounds Write).