CVE-2025-3528

Vendor solution

This issue can be mitigated by setting this line in each mirror registry systemd configurations:

--security-opt=no-new-privileges

This would prevent any privilege escalation until the issue is fixed.

Red Hat statement

This issue was classified with and Important severity according to the severity ratings described at https://access.redhat.com/security/updates/classification. This rating was given because the attacker, when a successfully attack is performed, can elevate its privilege to the root user.

Red Hat mitigation

This issue can be mitigated by setting this line in each mirror registry systemd configurations: --security-opt=no-new-privileges This would prevent any privilege escalation until the issue is fixed.