The Red Hat Web Terminal 1.11 on RHEL 9 web-terminal-tooling container image has been updated to fix nine important CVEs: CVE-2025-5914 (libarchive double free), CVE-2025-49794 and CVE-2025-49796 (libxml heap use-after-free and type confusion), CVE-2025-6020 and CVE-2025-8941 (linux-pam directory traversal and incomplete fix), CVE-2025-48384 and CVE-2025-48385 (git arbitrary code execution and arbitrary file writes), CVE-2025-7425 (libxslt heap use-after-free), and CVE-2025-6965 (sqlite integer truncation). The advisory recommends upgrading to the updated container image and rebuilding all dependent container images. The vendor advisory (RHSA-2025:15827) confirms the availability of patches and provides guidance for applying the update.

The vulnerabilities fixed include memory corruption issues (double free, use-after-free), directory traversal, arbitrary code execution, arbitrary file writes, and integer truncation. These could lead to denial of service, code execution, or unauthorized file manipulation if exploited. However, no known exploits in the wild have been reported. The impact is considered high due to the nature of the vulnerabilities and the components affected within the container image.

Red Hat has released an updated web-terminal-tooling container image that addresses these vulnerabilities. Users should upgrade to this updated image promptly and rebuild all container images that depend on it. Prior to applying this update, ensure all previously released errata relevant to your system are applied. Follow Red Hat's official guidance for applying the update as detailed in the advisory RHSA-2025:15827. No additional mitigation steps are indicated beyond applying the updated container image and rebuilding dependent images.