Red Hat Security AdvisoryRHSA-2025:8385
A Subscription Management tool for finding and reporting Red Hat product usage
Released 2025-06-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Discovery 1.14 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
Fixes 12 records
Priority HIGH 72
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01353 · Published 2025-03-14 · Partial fix · 2.7.0, 2.7.1-1.el10_0 +18 CWE-674
Priority HIGH 66
A flaw was found in rsync.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04646 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22
Priority HIGH 66
A path traversal vulnerability exists in rsync.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02259 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22
Priority HIGH 65
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.07723 · Published 2025-02-18 · Partial fix · 8.0p1-26.el8_10, 8.7p1-45.el9 +2 CWE-390
Priority LOW 35
Git is a source code management tool.
CVSS 4.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.00509 · Published 2025-01-15 · Partial fix CWE-116
Priority LOW 35
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00565 · Published 2023-09-04 · Partial fix · 9.0.1858 CWE-416
Priority LOW 33
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01292 · Published 2025-02-10 · Partial fix · 3.8.8, 3.8.9 +6 CWE-407
Priority LOW 32
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00507 · Published 2026-01-16 · Partial fix · 1.22 CWE-190
Priority LOW 32
A flaw in libtasn1 causes inefficient handling of specific certificate data.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0111 · Published 2025-02-10 · Partial fix · 4.20.0, 4.13-5.el8_10 +11 CWE-407
Priority LOW 31
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.01545 · Published 2025-01-31 · Partial fix · 3.9.22, 3.10.17 +4 CWE-20
Priority LOW 27
Requests is a HTTP library.
CVSS 3.1MEDIUM 5.6· Local · High privileges · User interaction · EPSS 0.0034 · Published 2024-05-20 · Partial fix · 2.32.0 CWE-670
Priority LOW 25
A flaw was found in rsync.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00385 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-362
THREATIST.IORead the docs