Red Hat Security Advisory

RHSA-2025:11479

ACS 4.7 enhancement and security update

Released 2025-07-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHACS 4.7 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-main-rhel8 +9

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395