What is RHSA-2025:4431?

RHSA-2025:4431 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenShift Container Platform 4.17.28 bug fix and security update

Which CVE IDs does RHSA-2025:4431 cover?

RHSA-2025:4431 covers the following CVE IDs: CVE-2024-55549, CVE-2025-24855, CVE-2025-27516. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:4431?

RHSA-2025:4431 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

RHSA-2025:4431HighCVSS 7.8

Red Hat Security Advisory: OpenShift Container Platform 4.17.28 bug fix and security update

Vendor

Red Hat Product Security

Published

May 9, 2025

Last Modified

June 2, 2026

🔗 CVE IDs covered (3)

CVE-2024-55549 →CVE-2025-24855 →CVE-2025-27516 →

📋 Description

CVE-2024-55549 — libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) CVE-2025-24855 — libxslt: Use-After-Free in libxslt numbers.c CVE-2025-27516 — jinja2: Jinja sandbox breakout through attr filter selecting format method

🔗 References (14)

selfhttps://access.redhat.com/errata/RHSA-2025:4431
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2350190
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2352483
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2352484
externalhttps://issues.redhat.com/browse/OCPBUGS-52314
externalhttps://issues.redhat.com/browse/OCPBUGS-54830
externalhttps://issues.redhat.com/browse/OCPBUGS-55118
externalhttps://issues.redhat.com/browse/OCPBUGS-55184
externalhttps://issues.redhat.com/browse/OCPBUGS-55202
externalhttps://issues.redhat.com/browse/OCPBUGS-55239
externalhttps://issues.redhat.com/browse/OCPBUGS-55344
externalhttps://issues.redhat.com/browse/OCPBUGS-55355
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4431.json