RHEA-2026:14435MediumCVSS 7.5

Red Hat Enhancement Advisory: Red Hat Edge Manager Version 1.1.2

Published
May 6, 2026
Last Modified
August 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-61728 →

📋 Description

CVE-2025-61728 — golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

🎯 Affected products38

  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • flightctl-0:1.1.2-1.el10em.src as a component of RHEM 1.1 for RHEL 10
  • flightctl-0:1.1.2-1.el9em.src as a component of RHEM 1.1 for RHEL 9
  • flightctl-agent-0:1.1.2-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-agent-0:1.1.2-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10
  • flightctl-agent-0:1.1.2-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10
  • flightctl-agent-0:1.1.2-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-agent-0:1.1.2-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-agent-0:1.1.2-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9
  • flightctl-agent-0:1.1.2-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9
  • flightctl-agent-0:1.1.2-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-cli-0:1.1.2-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-cli-0:1.1.2-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10
  • flightctl-cli-0:1.1.2-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10
  • flightctl-cli-0:1.1.2-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-cli-0:1.1.2-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-cli-0:1.1.2-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9
  • flightctl-cli-0:1.1.2-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9
  • flightctl-cli-0:1.1.2-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-observability-0:1.1.2-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-observability-0:1.1.2-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10
  • flightctl-observability-0:1.1.2-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10
  • flightctl-observability-0:1.1.2-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10
  • flightctl-observability-0:1.1.2-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-observability-0:1.1.2-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9
  • flightctl-observability-0:1.1.2-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9
  • flightctl-observability-0:1.1.2-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9
  • flightctl-selinux-0:1.1.2-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10
  • flightctl-selinux-0:1.1.2-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9
  • +8 more not shown

✅ Remediation

See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1 Workaround: To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.

🔗 References (3)