Priority CRITICAL 94KEV
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
RHSA-2025:15828
updated web-terminal/tooling container image
Released 2025-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Web Terminal 1.11 on RHEL 9 web-terminal/web-terminal-rhel9-operator, web-terminal/web-terminal-tooling-rhel9
Fixes 10 records
TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q
Integer Truncation on SQLite
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
TI-2025-06766 CVE-2025-7425 · GHSA-8c4w-j52q-j4jq
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Priority HIGH 69
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.
TI-2025-05340 CVE-2025-5914 · GHSA-7376-x4rm-3v8x
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
TI-2025-31732 CVE-2025-49796 · GHSA-83xx-9f6p-vwfj
Libxml: type confusion leads to denial of service (dos)
Priority MEDIUM 48
A vulnerability was found in libxml2.
TI-2025-31730 CVE-2025-49794 · GHSA-qg4c-8pj4-qgw2
Libxml: heap use after free (uaf) leads to denial of service (dos)
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
Priority MEDIUM 41
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
TI-2025-08188 CVE-2025-8941 · GHSA-hqqx-rjqh-53c2
Linux-pam: incomplete fix for cve-2025-6020
Priority LOW 36
A flaw was found in linux-pam.
TI-2025-05440 CVE-2025-6020
Linux-pam: linux-pam directory traversal
Priority LOW 36
A flaw was found in linux-pam.