VDB
RHSA-2025:8303
RHSA-2025:8303
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:70c6e4595e21f9469ba506af7ef41c7c24ef8bad32f0dc32ed314dc2387efd92_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | rhcos@sha256:14dca167b3c2951243d6b930d3887d1797cbb3028d9d70adde35ab2276cbebc3_x86_64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/network-tools-rhel8@sha256:b4fc6451642fb3f21604817013a537451906e990cf04e24c4b31546dfdc2fc2e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-tools-rhel8@sha256:ff98a2dd4d908ff6c10acc20b552aece31027170a78eaf241d30d6548a52f347_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-ironic-rhel9@sha256:8edeebfc2c86828d6341f1d4dc64c9bca0762e7bf86e6048511f04bf8708f760_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:1672893d4abfb034bc74af391f9ad7c5ae3f2fdb3b8c83321a83e68d5b8ac4fe_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-kube-proxy@sha256:bc52d69b411a923fd7440568c82328be6a20698edda9cc2307c13eb5fab6d67f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:6a12f8ca7077766f5547cb3dbd094840fc4bcf89cdcbf9b59e9840e8cba361de_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:0461d14b98d8a81ca0c7d26363b09809b60ca4fecf64bd1bebfdf7e56db8d5a0_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-installer@sha256:cdf6e9dd2df2e4f9c8b59d16b42a14fba7d0b17f05755afb5a777be9ad65f333_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-console@sha256:ec52e0c5a4b519f7c466bbeff01f6e167a3a26059db029ffb1d1c645da163489_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:097664cd76b162cfe18c895ecae749593f5763b541d419c7eebe801d6dbf3f4d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:d3860121b363e8b5155d4b950c81a6e38497ded9ce0bed1af53ebd65dee25843_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-ironic-agent-rhel9@sha256:3115a088cf3e757ae94a0e7488e98523addf6e1a0eba5b8b9de5e12a0aed539f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:997ba648c2936a22882a7ef2dd3ca4ff73fd01023854c58bd5fc4b1a0f2bea2b_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-tests@sha256:878a11e8055aa6bcd13fa9e7b4dcd93d0ae82b3d64bfb305ce2fc9716d31c88e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-installer-artifacts@sha256:63ba9382d7b4ded26a897b6fcf47aec2d95f1c9b648bc77a20cf936f3bb0bca1_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:6f0dec874dd4abda1ff4eab3336ccc72d78e41c2fb1e919b96dced519272e996_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel8@sha256:e0e255e1e71f11b48aaa8c91477f93caf7fdd5fe40647466fea50bb27b93c1fe_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:f48136a8d322099c1956f7ba4bd0b1fbb1be7cdca0cd58a2bc02d1fcb422b2ca_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
Timeline
- Jun 5, 2025 CVE Published
- Oct 24, 2026 CVE Updated
- Oct 24, 2026 Distribution Patch
- Oct 24, 2026 Distribution Patch
- Oct 24, 2026 Security Advisory
- Oct 24, 2026 Security Advisory
- Oct 24, 2026 Security Advisory
- Oct 24, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:8303 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2352483 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2352484 issue
- https://issues.redhat.com/browse/OCPBUGS-37799 advisory
- https://issues.redhat.com/browse/OCPBUGS-54772 advisory
- https://issues.redhat.com/browse/OCPBUGS-55035 advisory
- https://issues.redhat.com/browse/OCPBUGS-55951 advisory
- https://issues.redhat.com/browse/OCPBUGS-56130 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8303.json advisory
- https://access.redhat.com/security/cve/CVE-2024-55549 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-55549 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-55549 advisory
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/127 advisory
- https://access.redhat.com/security/cve/CVE-2025-24855 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-24855 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-24855 advisory
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/128 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
…and 5 more