TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq
Request smuggling due to acceptance of invalid chunked data in net/http
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
RHSA-2025:9642
osbuild-composer security update
Released 2025-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) osbuild-composer-46.3-4.el9_0, osbuild-composer-core-46.3-4.el9_0, osbuild-composer-dnf-json-46.3-4.el9_0 +1