RHSA-2025:15847

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.

tar-fs provides filesystem bindings for tar-stream.

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

Traefik is an HTTP reverse proxy and load balancer.

quic-go is an implementation of the QUIC protocol in Go.

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

Traefik is an HTTP reverse proxy and load balancer.

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.