Read the docs
Red Hat Security Advisory

RHSA-2025:22868

Insights proxy Container Image

Released 2025-12-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197
Priority MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125
TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

Priority LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674
Priority LOW 18

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00426 Published 2024-12-26 Partial fix CWE-1188