Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:*:*:*:*:*:*:*

part: a version: 4.12 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenshift Container Platform For Linuxone (1fb73b3f-6a9c-5c5b-a22b-8998bd8e4c9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13601 vulnerable 2026-06-08 07:04:32.669118 Glib: integer overflow in in g_escape_uri_string()
HIGH (7.7)
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Published: 2025-11-26T14:44:22.680Z
Updated: 2026-06-29T23:29:30.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9676 vulnerable 2026-06-08 07:00:28.502392 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
MEDIUM (6.5)
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
Published: 2024-10-15T15:27:33.665Z
Updated: 2026-04-24T15:07:44.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5625 vulnerable 2026-06-08 06:19:44.187411 Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
MEDIUM (5.3)
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
Published: 2023-11-01T13:28:10.190Z
Updated: 2025-11-20T18:06:27.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3089 vulnerable 2026-06-08 06:09:38.491237 Ocp & fips mode
HIGH (7)
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
Published: 2023-07-05T12:21:03.036Z
Updated: 2024-10-24T19:13:59.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4318 vulnerable 2026-06-08 05:51:37.194531 Cri-o: /etc/passwd tampering privesc
HIGH (7.8)
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
Published: 2023-09-25T19:23:02.119Z
Updated: 2024-08-03T01:34:50.124Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.