RHSA-2025:2652HighCVSS 8.2

Red Hat Security Advisory: RHODF-4.18-RHEL-9 enhancement, bug fix and security update

Published
March 11, 2025
Last Modified
May 29, 2026

🔗 CVE IDs covered (7)

CVE-2024-45338 →CVE-2024-55565 →CVE-2025-0426 →CVE-2023-44270 →CVE-2024-21528 →CVE-2024-21538 →CVE-2024-45337 →

📋 Description

CVE-2023-44270 — PostCSS: Improper input validation in PostCSS CVE-2024-21528 — node-gettext: Prototype Pollution CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-55565 — nanoid: nanoid mishandles non-integer values CVE-2025-0426 — k8s.io/kubernetes: kubelet: node denial of service via kubelet checkpoint API

🔗 References (69)