VDB
RHSA-2025%3A3059
RHSA-2025%3A3059
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in libxml2. This vulnerability allows a use-after-free via a crafted XML document validated against an XML schema with certain identity constraints or a crafted XML schema.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:5db739bfb314495090173f26327e11c95544f7a125aa94f3a840f39bcb616892_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:5db739bfb314495090173f26327e11c95544f7a125aa94f3a840f39bcb616892_ppc64le, openshift4/ose-kube-storage-version-migrator-rhel9@sha256:5db739bfb314495090173f26327e11c95544f7a125aa94f3a840f39bcb616892_ppc64le |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:8a837d9a114c8c6d6b387b02e7097c143847add103baccbc71fc04d1659939c0_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:8a837d9a114c8c6d6b387b02e7097c143847add103baccbc71fc04d1659939c0_s390x, * |
| Red Hat | openshift4/ose-keepalived-ipfailover-rhel9@sha256:ca3c77899bf04019cacfa2bfbf3500497099e4132617369703b985619a01c39f_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-keepalived-ipfailover-rhel9@sha256:ca3c77899bf04019cacfa2bfbf3500497099e4132617369703b985619a01c39f_s390x, openshift4/ose-keepalived-ipfailover-rhel9@sha256:ca3c77899bf04019cacfa2bfbf3500497099e4132617369703b985619a01c39f_s390x |
| Red Hat | openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:e224922957ac8afccf5e3fca0519e4d44efa0d4723415a7a8ad0974277f3f424_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:e224922957ac8afccf5e3fca0519e4d44efa0d4723415a7a8ad0974277f3f424_s390x |
| Red Hat | openshift4/ose-olm-catalogd-rhel9@sha256:5ea24e8415fefd14fa380a81065f281dab12ea905725c81784f3e8b52de0ea2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-olm-catalogd-rhel9@sha256:5ea24e8415fefd14fa380a81065f281dab12ea905725c81784f3e8b52de0ea2c_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:cb6f9a940e7a1b2866bb07ee2869c438bae084b7180385edb4929d24dc71cbb0_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:cb6f9a940e7a1b2866bb07ee2869c438bae084b7180385edb4929d24dc71cbb0_arm64, openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:cb6f9a940e7a1b2866bb07ee2869c438bae084b7180385edb4929d24dc71cbb0_arm64 |
| Red Hat | openshift4/ose-cli-rhel9@sha256:7f4d0e09d0be74800fd086780415834b77bfcf9b04b94c71497d81d4defdd7c7_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cli-rhel9@sha256:7f4d0e09d0be74800fd086780415834b77bfcf9b04b94c71497d81d4defdd7c7_amd64, openshift4/ose-cli-rhel9@sha256:7f4d0e09d0be74800fd086780415834b77bfcf9b04b94c71497d81d4defdd7c7_amd64, openshift4/ose-cli-rhel9@sha256:7f4d0e09d0be74800fd086780415834b77bfcf9b04b94c71497d81d4defdd7c7_amd64 |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:e0681963d4a1685a2927d2c5391b608f10af63a195b7cf24f075e35a62456c69_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-networking-console-plugin-rhel9@sha256:e0681963d4a1685a2927d2c5391b608f10af63a195b7cf24f075e35a62456c69_ppc64le, * |
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:cee2c2b5d404b954ad697a0ad214c66ba508ff04c87d8483abae5e7859fce1f1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:cee2c2b5d404b954ad697a0ad214c66ba508ff04c87d8483abae5e7859fce1f1_arm64, *, openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:cee2c2b5d404b954ad697a0ad214c66ba508ff04c87d8483abae5e7859fce1f1_arm64 |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel9@sha256:d6fd26260d903e96dfca3837eabe6f7829f6e21d5480dac1f7a42aab3831cf3c_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-multus-route-override-cni-rhel9@sha256:d6fd26260d903e96dfca3837eabe6f7829f6e21d5480dac1f7a42aab3831cf3c_ppc64le |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:8ea78399dd30ae26e3ad0606258dee082c9b2d00333da7764e383776b4c85f93_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-openshift-apiserver-rhel9@sha256:8ea78399dd30ae26e3ad0606258dee082c9b2d00333da7764e383776b4c85f93_s390x, openshift4/ose-openshift-apiserver-rhel9@sha256:8ea78399dd30ae26e3ad0606258dee082c9b2d00333da7764e383776b4c85f93_s390x, openshift4/ose-openshift-apiserver-rhel9@sha256:8ea78399dd30ae26e3ad0606258dee082c9b2d00333da7764e383776b4c85f93_s390x |
| Red Hat | openshift4/ose-must-gather-rhel9@sha256:032e7ca4912533937c62afe38bdad6596c7d0565018908cf5a50c48a37b943c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-must-gather-rhel9@sha256:032e7ca4912533937c62afe38bdad6596c7d0565018908cf5a50c48a37b943c2_ppc64le, openshift4/ose-must-gather-rhel9@sha256:032e7ca4912533937c62afe38bdad6596c7d0565018908cf5a50c48a37b943c2_ppc64le |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:11ce3a2ed3e2e26e0a809e4a736188353dd7d4d32c3a2c8ee40e2144c08970aa_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:11ce3a2ed3e2e26e0a809e4a736188353dd7d4d32c3a2c8ee40e2144c08970aa_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:11ce3a2ed3e2e26e0a809e4a736188353dd7d4d32c3a2c8ee40e2144c08970aa_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:11ce3a2ed3e2e26e0a809e4a736188353dd7d4d32c3a2c8ee40e2144c08970aa_s390x |
| Red Hat | openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64, openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64 |
| Red Hat | openshift4/ose-cloud-credential-rhel9-operator@sha256:6a78b863dc2f3928e3631a2803bba327c4dae3d91c14ccbe97f209c79be7badf_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cloud-credential-rhel9-operator@sha256:6a78b863dc2f3928e3631a2803bba327c4dae3d91c14ccbe97f209c79be7badf_ppc64le, openshift4/ose-cloud-credential-rhel9-operator@sha256:6a78b863dc2f3928e3631a2803bba327c4dae3d91c14ccbe97f209c79be7badf_ppc64le |
| Red Hat | openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64, openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64, openshift4/ose-console-rhel9-operator@sha256:0611ca4067c43e60d9af477761c75d95cd9b99de0887774fc348c71c2132f785_amd64 |
| Red Hat | openshift4/ose-cluster-config-rhel9-operator@sha256:2b8520148e57bd622d88bbdec6697bd64a8526150d8caf001eae9748bf2b1fee_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-config-rhel9-operator@sha256:2b8520148e57bd622d88bbdec6697bd64a8526150d8caf001eae9748bf2b1fee_arm64, openshift4/ose-cluster-config-rhel9-operator@sha256:2b8520148e57bd622d88bbdec6697bd64a8526150d8caf001eae9748bf2b1fee_arm64 |
| Red Hat | openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:e49d15f05c7af235cbc9584590c955d9ec5822c559f57d5541ac96488c308fb6_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:e49d15f05c7af235cbc9584590c955d9ec5822c559f57d5541ac96488c308fb6_amd64, openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:e49d15f05c7af235cbc9584590c955d9ec5822c559f57d5541ac96488c308fb6_amd64, openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:e49d15f05c7af235cbc9584590c955d9ec5822c559f57d5541ac96488c308fb6_amd64 |
| Red Hat | openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:15a9adbd6d63dd9de76ad2aec25ff66c307380cf9b238a08ea75c1da78ecaef1_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:15a9adbd6d63dd9de76ad2aec25ff66c307380cf9b238a08ea75c1da78ecaef1_amd64, openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:15a9adbd6d63dd9de76ad2aec25ff66c307380cf9b238a08ea75c1da78ecaef1_amd64, openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:15a9adbd6d63dd9de76ad2aec25ff66c307380cf9b238a08ea75c1da78ecaef1_amd64 |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:ca801c7852f06b3c0b15240b6fe1e4f96ac03e44fdefb7b107e60eb16536ce8c_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-installer-artifacts-rhel9@sha256:ca801c7852f06b3c0b15240b6fe1e4f96ac03e44fdefb7b107e60eb16536ce8c_amd64, openshift4/ose-installer-artifacts-rhel9@sha256:ca801c7852f06b3c0b15240b6fe1e4f96ac03e44fdefb7b107e60eb16536ce8c_amd64, * |
…and 1304 more
Timeline
- Mar 26, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 11, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:3059 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2346416 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2347423 issue
- https://issues.redhat.com/browse/OCPBUGS-51003 advisory
- https://issues.redhat.com/browse/OCPBUGS-52303 advisory
- https://issues.redhat.com/browse/OCPBUGS-52416 advisory
- https://issues.redhat.com/browse/OCPBUGS-53179 advisory
- https://issues.redhat.com/browse/OCPBUGS-53225 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3059.json advisory
- https://access.redhat.com/security/cve/CVE-2024-56171 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-56171 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-56171 advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 advisory
- https://access.redhat.com/security/cve/CVE-2025-27144 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-27144 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-27144 advisory
- https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22 advisory
- https://github.com/go-jose/go-jose/releases/tag/v4.0.5 advisory
- https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78 advisory