Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products5

• Red Hat Discovery 2
• registry.redhat.io/discovery/discovery-server-rhel9@sha256:6464f1f591001fd514a87e3c7347d2ce709b9c97edaad2d0d649ae69499049e9_arm64 as a component of Red Hat Discovery 2
• registry.redhat.io/discovery/discovery-server-rhel9@sha256:7d200c5dcd40e0885171fe20e3edb5d432a8675080846fb3ba273c601c5957a1_amd64 as a component of Red Hat Discovery 2
• registry.redhat.io/discovery/discovery-ui-rhel9@sha256:433bf55ccfa4cf7280f586fb3471bf84246e7f428f8ee9e99de9e36b635b7b09_arm64 as a component of Red Hat Discovery 2
• registry.redhat.io/discovery/discovery-ui-rhel9@sha256:9406c22bb1db456a5c81251cf1763822eb008504ad654203a1edc77076596c1d_amd64 as a component of Red Hat Discovery 2

✅ Remediation

The containers required to run Discovery can be installed through discovery-installer RPM. See the official documentation for more details. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Do not process untrusted files with the libxml2 library.

🔗 References (6)

• selfhttps://access.redhat.com/errata/RHSA-2025:14186
• externalhttps://access.redhat.com/security/cve/CVE-2025-32415
• externalhttps://access.redhat.com/security/cve/CVE-2025-8058
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14186.json