Red Hat Security AdvisoryRHSA-2025:21994
A Subscription Management tool for finding and reporting Red Hat product usage
Released 2025-11-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
Fixes 12 records
Priority HIGH 76
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00667 · Published 2025-10-22 · Fixed CWE-349
Priority HIGH 73
A flaw was found in Libtiff.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01005 · Published 2025-09-23 · Partial fix · 4.7.1, 4.6.0-6.el10_0.1 +30 CWE-123
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.73452 · Published 2025-07-15 · Partial fix · 3.50.2 CWE-197
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02222 · Published 2024-01-25 · Partial fix · 4.6.0, 4.6.0-6.el10_1.2 +16 CWE-122
Priority MEDIUM 55
A vulnerability was found in LibTIFF up to 4.7.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00287 · Published 2025-07-26 · Fixed CWE-119
Priority MEDIUM 52
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 4.1· Local · No auth · User interaction · EPSS 0.00871 · Published 2025-07-15 · Partial fix · 9.1.1551 CWE-22
Priority MEDIUM 52
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 4.1· Local · No auth · User interaction · EPSS 0.00342 · Published 2025-07-15 · Partial fix · 9.1.1552 CWE-22
Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2025-09-30 · Partial fix · 3.5.4, 3.4.3 +5 CWE-125
Priority MEDIUM 52
Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10737 · Published 2025-10-22 · Fixed CWE-405
Priority MEDIUM 44
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00466 · Published 2025-10-22 · Fixed CWE-341
Priority LOW 36
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01829 · Published 2024-01-25 · Partial fix · 4.6.0, 4.6.0-8.el10_2.4 +21 CWE-787
Priority LOW 18
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00426 · Published 2024-12-26 · Partial fix CWE-1188
THREATIST.IORead the docs