Red Hat Security Advisory

RHSA-2025:4250

RHSA: Submariner 0.19.4 - bug fix and enhancement update

Released 2025-04-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286

TI-2024-35722 CVE-2024-53259 · GHSA-px8v-pp82-rcvr

LOW 30

quic-go is an implementation of the QUIC protocol in Go.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00604 Published 2024-12-02 Partial fix · 0.48.2 CWE-345