Threats Tagged 'cve-2025-0938'

The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

A moderate severity security vulnerability (CVE-2025-0938) was identified in the Python 3 URL parser used in Red Hat Enterprise Linux 8. The flaw allowed square brackets in domain names, which is not standard behavior. This issue affects multiple Python 3 versions distributed with Red Hat Enterprise Linux 8 across various architectures. Red Hat has issued a security advisory (RHSA-2026:5588) with updated packages to address this vulnerability.

This advisory covers a bug fix and enhancement update for python3.12 on Red Hat Enterprise Linux 10. It addresses multiple security issues including a ReDos vulnerability (CVE-2024-6232) in the tarfile module due to excessive backtracking while parsing header values. The update is provided as a bug fix advisory with no explicit security fixes listed for python3.12 in this release, but it includes references to related CVEs. The update affects various Red Hat Enterprise Linux 10 and CodeReady Linux Builder 10 variants across multiple architectures. No known exploits are reported in the wild. The update is available and should be applied according to Red Hat's guidance.