Red Hat Security AdvisoryRHSA-2025:17181
Insights proxy Container Image
Released 2025-10-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
Fixes 6 records
Priority MEDIUM 43
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00896 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
Priority LOW 39
A flaw was found in GnuTLS.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01475 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-415
Priority LOW 36
A flaw was found in linux-pam.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2025-08-13 · Fixed in 1.1.8-23.el7_9.2, 1.3.1-38.el8_10 +19 CWE-22
Priority LOW 36
A flaw was found in linux-pam.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00472 · Published 2025-06-17 · Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22
Priority LOW 30
A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00771 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-476
Priority LOW 27
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01467 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295
THREATIST.IORead the docs