{"schema_version":"1","data":[{"id":27155,"advisory_id":"03358878-83bb-4e31-913b-56fd244cef67","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-7425","source_published_at":"2025-07-10T13:53:37.295+00:00","published_at":"2026-10-25T07:20:45.32802+00:00","extraction_method":"structured","technologies":["cert-manager-operator-for-red-hat-openshift-1-16","compliance-operator-1","core-cve","libxml2","openshift-file-integrity-operator-fio-1","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-openshift-distributed-tracing-3-5-3","red-hat-web-terminal-1-11-on-rhel-9","red-hat-web-terminal-1-12-on-rhel-9","rhoss-1-36-rhel-8"],"cve_ids":["CVE-2025-7425"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr","summary":"A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.","evidence":"cve:CVE-2025-7425","products":[{"name":{"value":"libxml2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.12 on RHEL 9","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cert-manager operator for Red Hat OpenShift 1.16","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift File Integrity Operator - FIO 1","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-7425","aliases":["CVE-2025-7425"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"GNOME","product":"libxml2","versions":[{"status":"affected","version":"0","lessThan":"2.15.2","versionType":"semver"}],"packageName":"libxml2","collectionURL":"https://gitlab.gnome.org/GNOME/libxml2/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.1.39-8.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:2.9.1-6.el7_9.12","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.9.7-21.el8_10.2","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.9.7-21.el8_10.2","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:2.9.7-9.el8_2.4","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.9.7-9.el8_4.7","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.9.7-9.el8_4.7","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.9.7-13.el8_6.11","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.9.7-13.el8_6.11","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.9.7-13.el8_6.11","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.9.7-16.el8_8.10","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.9.7-16.el8_8.10","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.9.13-11.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.9.13-11.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.9.13-1.el9_0.6","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.9.13-3.el9_2.8","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.9.13-11.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202509030110-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202509030117-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202508270040-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202508192014-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202508261955-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202508141510-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202508261658-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202508271124-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-19","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-8","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.12::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.12 on RHEL 9","versions":[{"status":"unaffected","version":"1.12-4","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-db-migrator-tool-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-9","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-management-console-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-12","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-18","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-builder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-7","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-devmode-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.16::el9"],"vendor":"Red Hat","product":"cert-manager operator for Red Hat OpenShift 1.16","versions":[{"status":"unaffected","version":"v1.16.5-1760515757","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-must-gather-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-openscap-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1::el9"],"vendor":"Red Hat","product":"OpenShift File Integrity Operator - FIO 1","versions":[{"status":"unaffected","version":"v1.3","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-file-integrity-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"2.0.1-1754478727","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.15.3-0.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1.5.5-1754504343","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559657","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-agent-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559845","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-all-in-one-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559691","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-collector-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559660","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-es-index-cleaner-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559663","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-es-rollover-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559657","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-ingester-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754569861","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559846","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-query-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1754559651","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-15T01:02:16.657Z","provider":"cve","references":["https://access.redhat.com/errata/RHBA-2025:12345","https://access.redhat.com/errata/RHSA-2025:12447","https://access.redhat.com/errata/RHSA-2025:12450","https://access.redhat.com/errata/RHSA-2025:13267","https://access.redhat.com/errata/RHSA-2025:13308","https://access.redhat.com/errata/RHSA-2025:13309","https://access.redhat.com/errata/RHSA-2025:13310","https://access.redhat.com/errata/RHSA-2025:13311","https://access.redhat.com/errata/RHSA-2025:13312","https://access.redhat.com/errata/RHSA-2025:13313","https://access.redhat.com/errata/RHSA-2025:13314","https://access.redhat.com/errata/RHSA-2025:13335","https://access.redhat.com/errata/RHSA-2025:13464","https://access.redhat.com/errata/RHSA-2025:13622","https://access.redhat.com/errata/RHSA-2025:14059","https://access.redhat.com/errata/RHSA-2025:14396","https://access.redhat.com/errata/RHSA-2025:14818","https://access.redhat.com/errata/RHSA-2025:14819","https://access.redhat.com/errata/RHSA-2025:14853","https://access.redhat.com/errata/RHSA-2025:14858","https://access.redhat.com/errata/RHSA-2025:15308","https://access.redhat.com/errata/RHSA-2025:15672","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:21913","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2025-7425","https://bugzilla.redhat.com/show_bug.cgi?id=2379274","https://gitlab.gnome.org/GNOME/libxslt/-/issues/140"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-7425","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-07-10T15:21:27.766014Z"}}}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/140","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-07-10T15:21:30.858Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html"},{"url":"http://seclists.org/fulldisclosure/2025/Aug/0"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/37"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/35"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/30"},{"url":"http://www.openwall.com/lists/oss-security/2025/07/11/2"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-04T21:14:55.508Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:02:16.657Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-12T17:43:14.078Z"}}},"related_cves":[{"value":"CVE-2025-7425","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":17102,"advisory_id":"3fdf6d33-9cb0-4102-815c-603c1f465cc0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-6020","source_published_at":"2025-06-17T12:44:08.646+00:00","published_at":"2026-10-25T01:27:22.854595+00:00","extraction_method":"structured","technologies":["cert-manager-operator-for-red-hat-openshift-1-16","compliance-operator-1","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-insights-proxy-1-5","red-hat-openshift-distributed-tracing-3-6-0","red-hat-openshift-sandboxed-containers-1-10","red-hat-web-terminal-1-11-on-rhel-9","red-hat-web-terminal-1-12-on-rhel-9","rhel-8-based-middleware-containers","rhoss-1-36-rhel-8"],"cve_ids":["CVE-2025-6020"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux-pam: linux-pam directory traversal","summary":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","evidence":"cve:CVE-2025-6020","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.12 on RHEL 9","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cert-manager operator for Red Hat OpenShift 1.16","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.6.0","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-6020","aliases":["CVE-2025-6020"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"1.7.1","versionType":"semver"}],"packageName":"linux-pam","collectionURL":"https://github.com/linux-pam/linux-pam","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.6.1-8.el10","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:1.6.1-8.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:1.1.8-23.el7_9.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:1.3.1-37.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:1.3.1-38.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:1.3.1-8.el8_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:1.3.1-14.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:1.3.1-16.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:1.3.1-16.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.3.1-16.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:1.3.1-26.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.3.1-26.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.5.1-26.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.5.1-25.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.5.1-26.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.5.1-25.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.5.1-9.el9_0.2","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.5.1-15.el9_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:1.5.1-24.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"pam","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-19","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-8","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.12::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.12 on RHEL 9","versions":[{"status":"unaffected","version":"1.12-4","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752066672","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752065732","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752065732","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1752065737","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752065731","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-25","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752065736","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-2.1752065733","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1752065755","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-db-migrator-tool-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-9","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-management-console-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-12","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-18","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-builder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-7","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-devmode-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.16::el9"],"vendor":"Red Hat","product":"cert-manager operator for Red Hat OpenShift 1.16","versions":[{"status":"unaffected","version":"v1.16.5-1760515757","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-openscap-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"2.0.0-1752592913","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"2.2.1-1758555934","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1.5.7-1759331989","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752046452","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-collector-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752046437","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752046439","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-target-allocator-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752070865","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-opa-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752070873","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1751993590","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-jaeger-query-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752070827","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-query-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752070833","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.6.0","versions":[{"status":"unaffected","version":"rhosdt-3.6-1752070866","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757422110","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421804","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421879","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-podvm-builder-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757422401","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"}],"modified":"2026-10-12T19:52:51.583Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2025:10024","https://access.redhat.com/errata/RHSA-2025:10027","https://access.redhat.com/errata/RHSA-2025:10180","https://access.redhat.com/errata/RHSA-2025:10354","https://access.redhat.com/errata/RHSA-2025:10357","https://access.redhat.com/errata/RHSA-2025:10358","https://access.redhat.com/errata/RHSA-2025:10359","https://access.redhat.com/errata/RHSA-2025:10361","https://access.redhat.com/errata/RHSA-2025:10362","https://access.redhat.com/errata/RHSA-2025:10735","https://access.redhat.com/errata/RHSA-2025:10823","https://access.redhat.com/errata/RHSA-2025:11386","https://access.redhat.com/errata/RHSA-2025:11487","https://access.redhat.com/errata/RHSA-2025:14557","https://access.redhat.com/errata/RHSA-2025:15099","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:20181","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:22019","https://access.redhat.com/errata/RHSA-2025:9526","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/security/cve/CVE-2025-6020","https://bugzilla.redhat.com/show_bug.cgi?id=2372512","https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-6020","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-06-17T13:30:00.379966Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-04T15:50:02.597Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/06/17/1"},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T18:13:57.307Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-05-12T12:02:28.144Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-12T19:52:51.583Z"}}},"related_cves":[{"value":"CVE-2025-6020","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":17101,"advisory_id":"ac4b4c3e-4983-4d46-930f-fc20dbe0eb62","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-5914","source_published_at":"2025-06-09T19:53:48.923+00:00","published_at":"2026-10-25T01:27:22.262335+00:00","extraction_method":"structured","technologies":["cert-manager-operator-for-red-hat-openshift-1-16","compliance-operator-1","core-cve","openshift-file-integrity-operator-fio-1","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-openshift-container-platform-4-20","red-hat-openshift-distributed-tracing-3-5-3","red-hat-openshift-sandboxed-containers-1-10","red-hat-web-terminal-1-11-on-rhel-9","red-hat-web-terminal-1-12-on-rhel-9","rhoss-1-36-rhel-8"],"cve_ids":["CVE-2025-5914"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c","summary":"A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.","evidence":"cve:CVE-2025-5914","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.20","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.11 on RHEL 9","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Web Terminal 1.12 on RHEL 9","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.36-RHEL-8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cert-manager operator for Red Hat OpenShift 1.16","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Compliance Operator 1","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift File Integrity Operator - FIO 1","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.5.3","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift sandboxed containers 1.10","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-5914","aliases":["CVE-2025-5914"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"3.8.0","versionType":"semver"}],"packageName":"libarchive","collectionURL":"https://github.com/libarchive/libarchive/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.7.7-4.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.1.2-14.el7_9.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:3.3.2-8.el8_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.3.3-1.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.3.3-1.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.3.3-5.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.3.3-5.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-6.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-6.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-2.el9_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-4.el9_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202510211419-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202601271320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202601071926-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202510112152-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202510230424-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202510140714-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.20::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","versions":[{"status":"unaffected","version":"4.20.9.6.202509251656-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-19","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.11::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.11 on RHEL 9","versions":[{"status":"unaffected","version":"1.11-8","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:webterminal:1.12::el9"],"vendor":"Red Hat","product":"Red Hat Web Terminal 1.12 on RHEL 9","versions":[{"status":"unaffected","version":"1.12-4","lessThan":"*","versionType":"rpm"}],"packageName":"web-terminal/web-terminal-tooling-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-data-index-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-db-migrator-tool-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-jobs-service-postgresql-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-9","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-management-console-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-12","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-18","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-builder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.36::el8"],"vendor":"Red Hat","product":"RHOSS-1.36-RHEL-8","versions":[{"status":"unaffected","version":"1.36.0-7","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/logic-swf-devmode-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.16::el9"],"vendor":"Red Hat","product":"cert-manager operator for Red Hat OpenShift 1.16","versions":[{"status":"unaffected","version":"v1.16.5-1760515757","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-must-gather-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-openscap-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"],"vendor":"Red Hat","product":"Compliance Operator 1","versions":[{"status":"unaffected","version":"1.8.0","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-compliance-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1::el9"],"vendor":"Red Hat","product":"OpenShift File Integrity Operator - FIO 1","versions":[{"status":"unaffected","version":"v1.3","lessThan":"*","versionType":"rpm"}],"packageName":"compliance/openshift-file-integrity-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"2.2.1-1758555934","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1.5.6-1756187445","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116455","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-agent-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116482","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-all-in-one-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116441","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-collector-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116449","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-es-index-cleaner-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116439","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-es-rollover-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116447","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-ingester-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756128595","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756125872","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-query-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.5.3","versions":[{"status":"unaffected","version":"rhosdt-3.5-1756116445","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/jaeger-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757422110","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421846","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421804","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757422070","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-must-gather-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421879","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-podvm-builder-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757422401","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift sandboxed containers 1.10","versions":[{"status":"unaffected","version":"1.10.2-1757421890","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-sandboxed-containers/osc-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-12T19:53:01.759Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2025:14130","https://access.redhat.com/errata/RHSA-2025:14135","https://access.redhat.com/errata/RHSA-2025:14137","https://access.redhat.com/errata/RHSA-2025:14141","https://access.redhat.com/errata/RHSA-2025:14142","https://access.redhat.com/errata/RHSA-2025:14525","https://access.redhat.com/errata/RHSA-2025:14528","https://access.redhat.com/errata/RHSA-2025:14594","https://access.redhat.com/errata/RHSA-2025:14644","https://access.redhat.com/errata/RHSA-2025:14808","https://access.redhat.com/errata/RHSA-2025:14810","https://access.redhat.com/errata/RHSA-2025:14828","https://access.redhat.com/errata/RHSA-2025:15024","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:18217","https://access.redhat.com/errata/RHSA-2025:18218","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:19041","https://access.redhat.com/errata/RHSA-2025:19046","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:21913","https://access.redhat.com/errata/RHSA-2026:0326","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/errata/RHSA-2026:1541","https://access.redhat.com/security/cve/CVE-2025-5914","https://bugzilla.redhat.com/show_bug.cgi?id=2370861","https://github.com/libarchive/libarchive/pull/2598","https://github.com/libarchive/libarchive/releases/tag/v3.8.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-5914","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-10T15:14:35.773233Z"}}}],"references":[{"url":"https://github.com/libarchive/libarchive/pull/2598","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-10T15:30:42.589Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","versions":[{"status":"affected","version":"0","lessThan":"V7.26.0310","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-07-14T12:39:07.960Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-12T19:53:01.759Z"}}},"related_cves":[{"value":"CVE-2025-5914","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":27155,"next_before":17101}