Red Hat Security Advisory

RHSA-2025:22935

Red Hat Update Infrastructure 5 security update

Released 2025-12-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1

Fixes 2 records

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

Resource allocation without limits in libexpat

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770

TI-2025-30310 CVE-2025-47906 · GHSA-gwrf-jf3h-w649

Unexpected paths returned from LookPath in os/exec

LOW 30

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpecte…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0055 Published 2025-09-18 Partial fix · 1.23.12, 1.24.6