RHSA-2025:22179MediumCVSS 7.0

Red Hat Security Advisory: RHSA 4.8.6 security and bug fix update

Published
November 26, 2025
Last Modified
September 6, 2026

🔗 CVE IDs covered (2)

CVE-2025-9648 →CVE-2025-47907 →

📋 Description

CVE-2025-9648 — civetweb: Denial of Service in CivetWeb CVE-2025-47907 — database/sql: Postgres Scan Race Condition

🎯 Affected products46

  • Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:138be3c2e5ee9346c0cdedd69e5095ef199ababf7b908f650a17bbbbd58d4887_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:1e8f7b5c46266c48635f7edc0457a9eb31b65f6af385337c2f21e7d73c1317cc_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7b49db4a123a971398297238fc49fbdf496e97e999732daf4b572fd5965a24b5_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:db2426e128a77d87ff2ed545065e4a16c1669872bdd6fb6acbdafcc31608e99f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4e13827b69f9e8be0771e36046c60ec35522b8ab6b93215687fbda51ba928afc_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5a07faace45b9bb6cafd88113902b51b3753ffdf777eba47e91f009cfadec528_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d32b4648796a4cb84487b87c122e881b0b44120cbc4487644de3d282e04b1696_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:efd818242280438cd837dbb0d98de6e20f8b833e34e057ef58914cd58c4ecbf7_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:632d59a6fe2744d7b38187285a133ecfd55b451c4cf71b9ec93d7975cfa573b8_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:69ae83546f898951d0c1b4028a27b0d846242490fc57e534e22c5ba99affbfff_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:cf58229564f2fb92b976bd0c0a8a437dba0275771ba3b262ed19c6c2aa54ff6d_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ed7a8f51c1fa21b1a1e74ba308725d876fd428aee02108ca6891a7a3765b3a20_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57a4b1a83e9fde88b7036214af7755f7596af46b1d80c2a3487a52fcb0e58451_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:32b1daedf2be5b33124e43ba3f0c5466ff5ada85cca68ae090af6b31f68a4eed_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:7aad126101821acc6afd36b4c0e0641fba86a370b430d01410e9615e620ae9b0_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b17afb0a292ea099e758c713d5c2c9979f387dc2dd87616e882deb91cdd4c5af_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c58e26261670437c30231f0f20d214374a61adf97c0732493fd2e7be4903d293_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:02af06a0072a0a6f0040222e38c268e9bed605564c46f2a67518c59e7849e46f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:033211cad525530507f4e72dc8364feda01875567ca5aaa9359c4b28adfaaa9a_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5f169b2de01c3f2afabfa6b864d16d0b69330bbfc49b84b04aa2cffdd9fefb19_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:beefa3051f5f29851e585e0ef42c147308b9063cf783c298f5e7d5dd260af061_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:1c7e43392284934063e1ecfc3395ce83c1a0d6ca45a77883e03176627a9900f2_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:49b6fa3d9db2a232c158cb0068345af6e0595ef3a12b85f8d2fd826b871ff34e_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:855a09e8a461e44281c21aabbddcdc3d15f85d589475f1973e944d60c53105f3_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e834bed756ade9bb6e84191ae6f2e94f60eb3cae4cba49ba094faaba7bd14de8_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a6de6a211349589dae08823073c6fe5fc633827a684453934bffd7b73ba4d77_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:13e4bc958e2a58fb52fc3c68b04bcade3ad14117d075cc8a56bc65e75c229c3f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ba2baf31ddef7a4cd30166cd2591915aa5d88613ce5c6b09a150a30f7221c287_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c0b669cbc9b32901f47c131df64d8241fc6b60d03757ff5df2e4306eb3ca50c1_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • +16 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)