Red Hat Security AdvisoryRHSA-2025:19088
A Subscription Management tool for finding and reporting Red Hat product usage
Released 2025-10-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-ui-rhel9
Fixes 6 records
Priority MEDIUM 52
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 4.1· Local · No auth · User interaction · EPSS 0.00871 · Published 2025-07-15 · Partial fix · 9.1.1551 CWE-22
Priority MEDIUM 52
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 4.1· Local · No auth · User interaction · EPSS 0.00342 · Published 2025-07-15 · Partial fix · 9.1.1552 CWE-22
Priority MEDIUM 43
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00896 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
Priority LOW 39
A flaw was found in GnuTLS.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01475 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-415
Priority LOW 30
A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00771 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-476
Priority LOW 27
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01467 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295