Red Hat Security Advisory

RHSA-2025:8691

RHSA: Submariner 0.20.1 - bug fix and enhancement update

Released 2025-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405