Read the docs
TI-2025-16743 Aliases CVE-2025-22871GHSA-g9pc-8g42-g6vq

Request smuggling due to acceptance of invalid chunked data in net/http

Priority MEDIUM 49CWE-1395Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 41 fixed, 15 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat.

Summary

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00842 58th percentileScored 2026-11-07
Fix Partial net/http/internal (Go standard library): 1.23.8, 1.24.2spiral/roadrunner (Packagist): 2025.1.0Red Hat: 120 advisoriesRed Hat: 41 fixed, 15 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarynet/http/internalbefore 1.23.8; 1.24.0-0 to before 1.24.21.23.8, 1.24.2Patch availableCNA
—spiral/roadrunner (Packagist)before 2025.1.02025.1.0Patch availableGHSA-g9pc-8g42-g6vq
  • net/http/internal VendorGo standard library Affected before 1.23.8; 1.24.0-0 to before 1.24.2 Fixed in 1.23.8, 1.24.2 Patch available CNA
  • spiral/roadrunner (Packagist) Vendor— Affected before 2025.1.0 Fixed in 2025.1.0 Patch available GHSA-g9pc-8g42-g6vq

Remediation

  • Fix · CNA net/http/internal (Go standard library) Fixed in 1.23.8, 1.24.2
  • Fix · GHSA-g9pc-8g42-g6vq spiral/roadrunner (Packagist) Fixed in 2025.1.0 Advisory →

Red Hat 120 advisories

  • RHSA-2026:12282 Released 2026-05-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.88 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2025:22683 Released 2025-12-03 · Red Hat rating Moderate
    multicluster engine for Kubernetes v2.7.7 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +8
  • RHSA-2025:21328 Released 2025-11-20 · Red Hat rating Important
    OpenShift Container Platform 4.14.59 packages and security update
    • Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-5.rhaos4.14.el8, cri-o-1.27.8-16.rhaos4.14.gite1422c1.el8, cri-o-1.27.8-16.rhaos4.14.gite1422c1.el9 +8
Show 117 more Red Hat advisories
  • RHSA-2025:21331 Released 2025-11-20 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2025:19306 Released 2025-11-06 · Red Hat rating Important
    OpenShift Container Platform 4.15.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-console, registry.redhat.io/openshift4/ose-multus-admission-controller-rhel9, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9
  • RHSA-2025:16124 Released 2025-09-17 · Red Hat rating Moderate
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.17.2-1 Update
    • Custom Metric Autoscaler operator for Red Hat Openshift 2.17 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2025:15291 Released 2025-09-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.11 packages and security update
    • Red Hat OpenShift Container Platform 4.19 openshift-4.19.0-202509011627.p2.g169f654.assembly.stream.el9, openshift-hyperkube-4.19.0-202509011627.p2.g169f654.assembly.stream.el9, openshift-kube-apiserver-4.19.0-202509011627.p2.g169f654.assembly.stream.el9 +3
  • RHSA-2025:13671 Released 2025-08-12 · Red Hat rating Moderate
    Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog
    • Red Hat Ceph Storage 7.1 Tools rhceph/grafana-rhel10, rhceph/grafana-rhel9, rhceph/keepalived-rhel9 +4
  • RHSA-2025:13241 Released 2025-08-06 · Red Hat rating Moderate
    Logging for Red Hat OpenShift - 6.2.4
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/logging-loki-rhel9
  • RHSA-2025:12831 Released 2025-08-05 · Red Hat rating Moderate
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.127.0-1.el9_6
  • RHSA-2025:12850 Released 2025-08-05 · Red Hat rating Moderate
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.127.0-1.el10_0
  • RHSA-2025:12891 Released 2025-08-05 · Red Hat rating Moderate
    Red Hat multicluster global hub 1.4.2 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9
  • RHSA-2025:12091 Released 2025-07-31 · Red Hat rating Moderate
    Security release of Control plane Operators: RHOSO 18.0.10 (Feature Release 3)
    • 9Base-RHOSO-1.0-PODIFIED rhoso-operators/sg-core-rhel9
  • RHSA-2025:12359 Released 2025-07-31 · Red Hat rating Important
    Red Hat OpenShift sandboxed containers release
    • Red Hat OpenShift sandboxed containers 1.10 registry.redhat.io/openshift-sandboxed-containers/osc-rhel9-operator
  • RHSA-2025:11678 Released 2025-07-30 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.21 packages and security update
    • Red Hat OpenShift Container Platform 4.18 afterburn-5.3.0-2.rhaos4.12.el8, afterburn-dracut-5.3.0-2.rhaos4.12.el8, container-selinux-4:2.235.0-2.rhaos4.18.el8 +7
  • RHSA-2025:11682 Released 2025-07-30 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.45 packages and security update
    • Red Hat OpenShift Container Platform 4.16 kata-containers-3.17.0-2.rhaos4.16.el9
  • RHSA-2025:11749 Released 2025-07-24 · Red Hat rating Important
    Updated 8.1 container image is now available: security and bug fix update
    • Red Hat Ceph Storage 8.1 Tools rhceph/grafana-rhel9
  • RHSA-2025:11352 Released 2025-07-23 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.55 packages and security update
    • Red Hat OpenShift Container Platform 4.15 ose-azure-acr-image-credential-provider-4.15.0-202507041136.p0.g0d799a2.assembly.stream.el8, ose-azure-acr-image-credential-provider-4.15.0-202507041136.p0.g0d799a2.assembly.stream.el9
  • RHSA-2025:11479 Released 2025-07-21 · Red Hat rating Moderate
    ACS 4.7 enhancement and security update
    • RHACS 4.7 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-main-rhel8 +9
  • RHSA-2025:11396 Released 2025-07-18 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update
    • 9Base-OADP-1.4 oadp/oadp-kubevirt-velero-plugin-rhel9, oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator +5
  • RHSA-2025:10782 Released 2025-07-18 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.44 packages and security update
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.13-9.rhaos4.16.git6cc30d2.el8, cri-o-1.29.13-9.rhaos4.16.git6cc30d2.el9, cri-tools-1.29.0-7.el8 +27
  • RHSA-2025:10768 Released 2025-07-18 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.20 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-tools-1.31.1-4.el8, cri-tools-1.31.1-4.el9, openshift-4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8 +21
  • RHSA-2025:10781 Released 2025-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.16.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2025:10767 Released 2025-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.18.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2025:10271 Released 2025-07-10 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.78 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-31.rhaos4.12.git53dc492.el8, cri-tools-1.25.0-6.el8
  • RHSA-2025:10295 Released 2025-07-09 · Red Hat rating Important
    OpenShift Container Platform 4.17.35 packages and security update
    • Red Hat OpenShift Container Platform 4.17 containernetworking-plugins-1:1.4.0-5.rhaos4.17.el8, cri-o-1.30.14-3.rhaos4.17.git0a197ae.el8, cri-o-1.30.14-3.rhaos4.17.git0a197ae.el9 +18
  • RHSA-2025:10294 Released 2025-07-09 · Red Hat rating Important
    OpenShift Container Platform 4.17.35 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2025:10291 Released 2025-07-08 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.3 packages and security update
    • Red Hat OpenShift Container Platform 4.19 kata-containers-3.13.0-2.rhaos4.20.el9
  • RHSA-2025:10323 Released 2025-07-03 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-agent-init-rhel9, cryostat/cryostat-db-rhel9, cryostat/cryostat-grafana-dashboard-rhel9 +8
  • RHSA-2025:9986 Released 2025-06-30 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-eda-controller-1.1.11-1.el8ap, automation-eda-controller-base-1.1.11-1.el8ap, automation-eda-controller-base-services-1.1.11-1.el8ap +6
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-eda-controller-1.1.11-1.el9ap, automation-eda-controller-base-1.1.11-1.el9ap, automation-eda-controller-base-services-1.1.11-1.el9ap +8
  • RHSA-2025:9975 Released 2025-06-30 · Red Hat rating Moderate
    Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.4 for RHEL 8 receptor-1.5.7-1.el8ap
    • Red Hat Ansible Automation Platform 2.4 for RHEL 9 receptor-1.5.7-1.el9ap
  • RHSA-2025:9844 Released 2025-06-26 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101-4.el8_10, osbuild-composer-core-101-4.el8_10, osbuild-composer-worker-101-4.el8_10
  • RHSA-2025:9845 Released 2025-06-26 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream (v. 8) weldr-client-35.12-3.el8_10
  • RHSA-2025:9756 Released 2025-06-26 · Red Hat rating Moderate
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.127.0-1.el9_4
  • RHSA-2025:9712 Released 2025-06-26 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) weldr-client-35.9-3.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) weldr-client-35.9-3.el8_8
  • RHSA-2025:9714 Released 2025-06-26 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) weldr-client-35.5-2.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) weldr-client-35.5-2.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) weldr-client-35.5-2.el8_6
  • RHSA-2025:9713 Released 2025-06-26 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-3.el8_6, osbuild-composer-core-46.3-3.el8_6, osbuild-composer-dnf-json-46.3-3.el8_6 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) osbuild-composer-46.3-3.el8_6, osbuild-composer-core-46.3-3.el8_6, osbuild-composer-dnf-json-46.3-3.el8_6 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) osbuild-composer-46.3-3.el8_6, osbuild-composer-core-46.3-3.el8_6, osbuild-composer-dnf-json-46.3-3.el8_6 +1
  • RHSA-2025:9711 Released 2025-06-26 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-4.el8_8, osbuild-composer-core-75-4.el8_8, osbuild-composer-dnf-json-75-4.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-4.el8_8, osbuild-composer-core-75-4.el8_8, osbuild-composer-dnf-json-75-4.el8_8 +1
  • RHSA-2025:9715 Released 2025-06-26 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) osbuild-composer-28.7-3.el8_4, osbuild-composer-core-28.7-3.el8_4, osbuild-composer-worker-28.7-3.el8_4
  • RHSA-2025:9641 Released 2025-06-25 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) osbuild-composer-101.3-2.el9_4, osbuild-composer-core-101.3-2.el9_4, osbuild-composer-worker-101.3-2.el9_4
  • RHSA-2025:9640 Released 2025-06-25 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-2.el9_2, osbuild-composer-core-76.1-2.el9_2, osbuild-composer-dnf-json-76.1-2.el9_2 +1
  • RHSA-2025:9642 Released 2025-06-25 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) osbuild-composer-46.3-4.el9_0, osbuild-composer-core-46.3-4.el9_0, osbuild-composer-dnf-json-46.3-4.el9_0 +1
  • RHSA-2025:9638 Released 2025-06-25 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) weldr-client-35.12-3.el9_4
  • RHSA-2025:9637 Released 2025-06-25 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) weldr-client-35.9-2.el9_2
  • RHSA-2025:9639 Released 2025-06-25 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) weldr-client-35.5-3.el9_0
  • RHSA-2025:9634 Released 2025-06-25 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-132.2-2.el9_6, osbuild-composer-core-132.2-2.el9_6, osbuild-composer-worker-132.2-2.el9_6
  • RHSA-2025:9635 Released 2025-06-25 · Red Hat rating Moderate
    weldr-client security update
    • Red Hat Enterprise Linux AppStream (v. 9) weldr-client-35.12-4.el9_6
  • RHSA-2025:9623 Released 2025-06-25 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-134.1-2.el10_0, osbuild-composer-core-134.1-2.el10_0, osbuild-composer-worker-134.1-2.el10_0
  • RHSA-2025:9279 Released 2025-06-24 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.1 packages and security update
    • Red Hat OpenShift Container Platform 4.19 cri-o-1.32.5-3.rhaos4.19.git9607a04.el9, cri-tools-1.32.0-2.el9, openshift-clients-4.19.0-202506161807.p0.gfa1fd95.assembly.stream.el8 +10
  • RHSA-2025:9278 Released 2025-06-24 · Red Hat rating Important
    OpenShift Container Platform 4.19.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 openshift4/aws-karpenter-provider-aws-rhel9, openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2025:9312 Released 2025-06-23 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1.x86_64::container-tools:rhel8 +47
  • RHSA-2025:9342 Released 2025-06-23 · Red Hat rating Moderate
    Migration Toolkit for Containers (MTC) 1.8.8 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-registry-rhel8
  • RHSA-2025:9317 Released 2025-06-23 · Red Hat rating Moderate
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.24.1-2.el10_0
  • RHSA-2025:9319 Released 2025-06-23 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) delve-1.3.2-3.module+el8.2.0+5581+896cb53e.src::go-toolset:rhel8, delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64::go-toolset:rhel8, go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.src::go-toolset:rhel8 +9
  • RHSA-2025:9313 Released 2025-06-23 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.2
  • RHSA-2025:9311 Released 2025-06-23 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) grafana-6.3.6-8.el8_2, grafana-azure-monitor-6.3.6-8.el8_2, grafana-cloudwatch-6.3.6-8.el8_2 +10
  • RHSA-2025:9177 Released 2025-06-17 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) git-lfs-2.13.3-5.el9_0.4
  • RHSA-2025:9206 Released 2025-06-17 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-pcp-3.0.2-2.el8_4
  • RHSA-2025:9207 Released 2025-06-17 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-10.el8_4
  • RHSA-2025:9205 Released 2025-06-17 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.3
  • RHSA-2025:9199 Released 2025-06-17 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) git-lfs-2.13.3-3.el8_6.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) git-lfs-2.13.3-3.el8_6.4
  • RHSA-2025:9200 Released 2025-06-17 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.4
  • RHSA-2025:9172 Released 2025-06-17 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src::go-toolset:rhel8, delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64::go-toolset:rhel8, go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src::go-toolset:rhel8 +9
  • RHSA-2025:9156 Released 2025-06-17 · Red Hat rating Moderate
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0, ipp-usb-0.9.27-3.el10_0
  • RHSA-2025:9142 Released 2025-06-17 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+23250+94af2c8e.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23250+94af2c8e.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23250+94af2c8e.s390x::container-tools:rhel8 +47
  • RHSA-2025:9144 Released 2025-06-17 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-5:5.4.0-10.el9_6, podman-docker-5:5.4.0-10.el9_6, podman-plugins-5:5.4.0-10.el9_6 +2
  • RHSA-2025:9147 Released 2025-06-17 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.39.4-2.el9_6, buildah-tests-2:1.39.4-2.el9_6
  • RHSA-2025:9150 Released 2025-06-17 · Red Hat rating Moderate
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream (v. 9) gvisor-tap-vsock-6:0.8.5-2.el9_6, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6
  • RHSA-2025:9145 Released 2025-06-17 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.18.1-2.el9_6, skopeo-tests-2:1.18.1-2.el9_6
  • RHSA-2025:9151 Released 2025-06-17 · Red Hat rating Moderate
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream (v. 10) gvisor-tap-vsock-6:0.8.5-2.el10_0, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0
  • RHSA-2025:9143 Released 2025-06-17 · Red Hat rating Moderate
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.6.2-2.el9_6
  • RHSA-2025:9149 Released 2025-06-17 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.18.1-2.el10_0, skopeo-tests-2:1.18.1-2.el10_0
  • RHSA-2025:9146 Released 2025-06-17 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-6:5.4.0-10.el10_0, podman-docker-6:5.4.0-10.el10_0, podman-remote-6:5.4.0-10.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-6:5.4.0-10.el10_0
  • RHSA-2025:9148 Released 2025-06-17 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.39.4-2.el10_0, buildah-tests-2:1.39.4-2.el10_0
  • RHSA-2025:9106 Released 2025-06-16 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-2.el9_6
  • RHSA-2025:9102 Released 2025-06-16 · Red Hat rating Moderate
    RHOAI 2.21.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.21 registry.redhat.io/rhoai/odh-rhel9-operator
  • RHSA-2025:9078 Released 2025-06-16 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) git-lfs-3.4.1-4.el9_4.2
  • RHSA-2025:9070 Released 2025-06-16 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-7.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-7.5.11-7.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-7.5.11-7.el8_6
  • RHSA-2025:9069 Released 2025-06-16 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.aarch64::go-toolset:rhel8 +18
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
  • RHSA-2025:9060 Released 2025-06-16 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-5.el8_10
  • RHSA-2025:9065 Released 2025-06-16 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) skopeo-2:1.8.0-4.1.el9_0.1, skopeo-tests-2:1.8.0-4.1.el9_0.1
  • RHSA-2025:9064 Released 2025-06-16 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) podman-2:4.2.0-6.el9_0.4, podman-catatonit-2:4.2.0-6.el9_0.4, podman-docker-2:4.2.0-6.el9_0.4 +4
  • RHSA-2025:9067 Released 2025-06-16 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-2.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-pcp-3.2.0-2.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-pcp-3.2.0-2.el8_6
  • RHSA-2025:9062 Released 2025-06-16 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.9-1.el9_0.1, buildah-tests-1:1.26.9-1.el9_0.1
  • RHSA-2025:9061 Released 2025-06-16 · Red Hat rating Moderate
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) containernetworking-plugins-1:1.0.1-6.el9_0.2
  • RHSA-2025:9063 Released 2025-06-16 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.6.1-2.el10_0
  • RHSA-2025:9059 Released 2025-06-16 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-7.5.11-11.el9_0
  • RHSA-2025:9043 Released 2025-06-12 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) golang-1.17.13-6.el9_0, golang-bin-1.17.13-6.el9_0, golang-docs-1.17.13-6.el9_0 +4
  • RHSA-2025:9025 Released 2025-06-12 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.x86_64::container-tools:rhel8 +47
  • RHSA-2025:9020 Released 2025-06-12 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.2, podman-docker-2:4.4.1-22.el9_2.2, podman-gvproxy-2:4.4.1-22.el9_2.2 +3
  • RHSA-2025:9019 Released 2025-06-12 · Red Hat rating Moderate
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.2
  • RHSA-2025:9018 Released 2025-06-12 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.2-0.1.el9_2.3, skopeo-tests-2:1.11.2-0.1.el9_2.3
  • RHSA-2025:9017 Released 2025-06-12 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.5-1.el9_2.1, buildah-tests-1:1.29.5-1.el9_2.1
  • RHSA-2025:8984 Released 2025-06-12 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-pcp-3.2.0-4.el9_0
  • RHSA-2025:8983 Released 2025-06-12 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-4.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-4.el8_8
  • RHSA-2025:8982 Released 2025-06-12 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-3.el9_2
  • RHSA-2025:8975 Released 2025-06-12 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-pcp-5.1.1-5.el9_4
  • RHSA-2025:8974 Released 2025-06-12 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+22903+37387f31.ppc64le::go-toolset:rhel8 +12
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+22903+37387f31.src::go-toolset:rhel8 +9
  • RHSA-2025:8918 Released 2025-06-11 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-10.el8_10
  • RHSA-2025:8916 Released 2025-06-11 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-11.el9_6
  • RHSA-2025:8915 Released 2025-06-11 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.2.2-3.el10_0
  • RHSA-2025:8737 Released 2025-06-10 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) golang-1.19.13-16.el9_2, golang-bin-1.19.13-16.el9_2, golang-docs-1.19.13-16.el9_2 +4
  • RHSA-2025:8689 Released 2025-06-09 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) go-toolset-1.21.13-9.el9_4, golang-1.21.13-9.el9_4, golang-bin-1.21.13-9.el9_4 +4
  • RHSA-2025:8691 Released 2025-06-09 · Red Hat rating Important
    RHSA: Submariner 0.20.1 - bug fix and enhancement update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6
  • RHSA-2025:8682 Released 2025-06-09 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-14.el9_6, grafana-selinux-10.2.6-14.el9_6
  • RHSA-2025:8680 Released 2025-06-09 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-8.el9_2
  • RHSA-2025:8685 Released 2025-06-09 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-7.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-7.el8_8
  • RHSA-2025:8667 Released 2025-06-09 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-25.el8_10, grafana-selinux-9.2.10-25.el8_10
  • RHSA-2025:8666 Released 2025-06-09 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-18.el10_0, grafana-selinux-10.2.6-18.el10_0
  • RHSA-2025:8665 Released 2025-06-09 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-9.2.10-23.el9_4, grafana-selinux-9.2.10-23.el9_4
  • RHSA-2025:8670 Released 2025-06-09 · Red Hat rating Moderate
    Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
    • 8Base-Openshift-Serverless-1.36 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-db-migrator-tool-rhel8 +6
  • RHSA-2025:8634 Released 2025-06-09 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-18.el9_4.1, podman-docker-4:4.9.4-18.el9_4.1, podman-plugins-4:4.9.4-18.el9_4.1 +2
  • RHSA-2025:8632 Released 2025-06-09 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) buildah-2:1.33.12-2.el9_4.1, buildah-tests-2:1.33.12-2.el9_4.1
  • RHSA-2025:8633 Released 2025-06-09 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) skopeo-2:1.14.5-2.el9_4.1, skopeo-tests-2:1.14.5-2.el9_4.1
  • RHSA-2025:8601 Released 2025-06-05 · Red Hat rating Moderate
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) gvisor-tap-vsock-6:0.7.3-5.el9_4.2
  • RHSA-2025:8539 Released 2025-06-04 · Red Hat rating Moderate
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) containernetworking-plugins-1:1.4.0-6.el9_4.1
  • RHSA-2025:8478 Released 2025-06-04 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.24.1-1.module+el8.10.0+22945+b2c96a17.aarch64::go-toolset:rhel8, delve-1.24.1-1.module+el8.10.0+22945+b2c96a17.ppc64le::go-toolset:rhel8, delve-1.24.1-1.module+el8.10.0+22945+b2c96a17.src::go-toolset:rhel8 +19
  • RHSA-2025:8476 Released 2025-06-04 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.23.9-1.el9_6, golang-1.23.9-1.el9_6, golang-bin-1.23.9-1.el9_6 +5
  • RHSA-2025:8477 Released 2025-06-04 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.23.9-1.el10_0, golang-1.23.9-1.el10_0, golang-bin-1.23.9-1.el10_0 +4
  • RHSA-2025:8298 Released 2025-05-29 · Red Hat rating Moderate
    Red Hat OpenShift Service Mesh 3.0.2
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Custom Metric Autoscaler operator for Red Hat OpenshiftAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix planned: Will not fix
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Edge Manager previewAffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
8Base-Openshift-Serverless-1.36Fixed RHSA-2025:8670
8Base-RHMTC-1.8Fixed RHSA-2025:9342
9Base-OADP-1.4Fixed RHSA-2025:11396
9Base-RHOSO-1.0-PODIFIEDFixed RHSA-2025:12091
Cryostat 4 on RHEL 9Fixed RHSA-2025:10323
Custom Metric Autoscaler operator for Red Hat Openshift 2.17Fixed RHSA-2025:16124
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2025:13241
Multicluster Global Hub 1.4.9Fixed RHSA-2025:12891
RHACS 4.7 for RHEL 8Fixed RHSA-2025:11479
Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed RHSA-2025:8691
Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed RHSA-2025:9975
Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed RHSA-2025:9975
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2025:9986
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2025:9986
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2025:13671
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:11749
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:12850, RHSA-2025:8477, RHSA-2025:8666, RHSA-2025:8915, RHSA-2025:9063, RHSA-2025:9146, RHSA-2025:9148, RHSA-2025:9149, RHSA-2025:9151, RHSA-2025:9156, RHSA-2025:9317, RHSA-2025:9623
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:8478, RHSA-2025:8667, RHSA-2025:8918, RHSA-2025:9060, RHSA-2025:9142, RHSA-2025:9844, RHSA-2025:9845
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:12831, RHSA-2025:8476, RHSA-2025:8682, RHSA-2025:8916, RHSA-2025:9106, RHSA-2025:9143, RHSA-2025:9144, RHSA-2025:9145, RHSA-2025:9147, RHSA-2025:9150, RHSA-2025:9634, RHSA-2025:9635
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:9311, RHSA-2025:9319
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:9172, RHSA-2025:9206, RHSA-2025:9207, RHSA-2025:9313, RHSA-2025:9715
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:9067, RHSA-2025:9069, RHSA-2025:9070, RHSA-2025:9199, RHSA-2025:9312, RHSA-2025:9713, RHSA-2025:9714
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:9067, RHSA-2025:9069, RHSA-2025:9070, RHSA-2025:9199, RHSA-2025:9312, RHSA-2025:9713, RHSA-2025:9714
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:8685, RHSA-2025:8974, RHSA-2025:8983, RHSA-2025:9025, RHSA-2025:9200, RHSA-2025:9711, RHSA-2025:9712
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:8984, RHSA-2025:9043, RHSA-2025:9059, RHSA-2025:9061, RHSA-2025:9062, RHSA-2025:9064, RHSA-2025:9065, RHSA-2025:9177, RHSA-2025:9639, RHSA-2025:9642
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:8680, RHSA-2025:8737, RHSA-2025:8982, RHSA-2025:9017, RHSA-2025:9018, RHSA-2025:9019, RHSA-2025:9020, RHSA-2025:9205, RHSA-2025:9637, RHSA-2025:9640
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:8539, RHSA-2025:8601, RHSA-2025:8632, RHSA-2025:8633, RHSA-2025:8634, RHSA-2025:8665, RHSA-2025:8689, RHSA-2025:8975, RHSA-2025:9078, RHSA-2025:9638, RHSA-2025:9641, RHSA-2025:9756
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:9067, RHSA-2025:9069, RHSA-2025:9070, RHSA-2025:9199, RHSA-2025:9312, RHSA-2025:9713, RHSA-2025:9714
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:8685, RHSA-2025:8974, RHSA-2025:8983, RHSA-2025:9200, RHSA-2025:9711, RHSA-2025:9712
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:9146
Red Hat OpenShift AI 2.21Fixed RHSA-2025:9102
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2025:10271, RHSA-2026:12282
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2025:21328, RHSA-2025:21331
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2025:11352, RHSA-2025:19306
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2025:10781, RHSA-2025:10782, RHSA-2025:11682
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2025:10294, RHSA-2025:10295
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2025:10767, RHSA-2025:10768, RHSA-2025:11678
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2025:10291, RHSA-2025:15291, RHSA-2025:9278, RHSA-2025:9279
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2025:8298
Red Hat OpenShift sandboxed containers 1.10Fixed RHSA-2025:12359
multicluster engine for Kubernetes 2.7Fixed RHSA-2025:22683
Not affected: 37 products
  • 8Base-Openshift-Serverless-1.36
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.4
  • 9Base-RHOSO-1.0-PODIFIED
  • Custom Metric Autoscaler operator for Red Hat Openshift 2.17
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Multicluster Global Hub 1.4.9
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ceph Storage 6
  • Red Hat Ceph Storage 7
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 8.1 Tools
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI 2.21
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift sandboxed containers 1.10
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Satellite 6
  • Red Hat Service Interconnect 2
  • multicluster engine for Kubernetes 2.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-22871
  2. 2026-10-03 Alias added: GHSA-g9pc-8g42-g6vq
  3. 2026-10-13 Fix available: Red Hat OpenShift sandboxed containers 1.10 · Red Hat
  4. 2026-11-04 Fix available: RHSA-2025:8691 · Red Hat

References

Advisory 1

Other 10

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences