Read the docs
Red Hat Security Advisory

RHSA-2025:23248

RHSA 4.7.9 security and bug fix update

Released 2025-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197
TI-2025-08840 CVE-2025-9648 · GHSA-2gxg-pvm2-2p6x

Denial of Service in CivetWeb

Priority MEDIUM 45

A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00756 Published 2025-09-29 Fixed CWE-158
Priority LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770