Red Hat Security Advisory

RHSA-2025:16524

A Subscription Management tool for finding and reporting Red Hat product usage

Released 2025-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-05340 CVE-2025-5914 · GHSA-7376-x4rm-3v8x

HIGH 67

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00491 Published 2025-06-09 Partial fix · 3.8.0, 3.7.7-4.el10_0 +48 CWE-190

TI-2025-07498 CVE-2025-8194 · GHSA-v594-44hm-2j7p

MEDIUM 40

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00761 Published 2025-07-28 Partial fix · 3.9.24, 3.10.19 +4 CWE-835

TI-2025-08188 CVE-2025-8941 · GHSA-hqqx-rjqh-53c2

LOW 36

A flaw was found in linux-pam.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2025-08-13 Fixed in 1.1.8-23.el7_9.2, 1.3.1-38.el8_10 +19 CWE-22

TI-2025-05440 CVE-2025-6020

LOW 36

A flaw was found in linux-pam.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00472 Published 2025-06-17 Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22