TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq
Request smuggling due to acceptance of invalid chunked data in net/http
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
RHSA-2025:8670
Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
Released 2025-06-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 8Base-Openshift-Serverless-1.36 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-db-migrator-tool-rhel8 +6
Fixes 2 records
TI-2025-16738 CVE-2025-22866 · GHSA-3whm-j4xm-rv8x
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.