TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq
Request smuggling due to acceptance of invalid chunked data in net/http
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
RHSA-2025:9312
container-tools:rhel8 security update
Released 2025-06-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.s390x::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.x86_64::container-tools:rhel8 +47