Red Hat Security Advisory

RHSA-2025:22179

RHSA 4.8.6 security and bug fix update

Released 2025-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8

TI-2025-08840 CVE-2025-9648 · GHSA-2gxg-pvm2-2p6x

MEDIUM 45

A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00756 Published 2025-09-29 Fixed CWE-158

TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3

LOW 31

Cancelling a query (e.g.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00406 Published 2025-08-07 Partial fix · 1.23.12, 1.24.6 CWE-362