RHSA-2025:22182HighCVSS 8.2
Red Hat Security Advisory: Red Hat Quay 3.10.16
🔗 CVE IDs covered (5)
📋 Description
CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2025-59420 — authlib: Authlib RFC violation CVE-2025-61920 — authlib: Authlib Denial of Service
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2025:22182
- externalhttps://access.redhat.com/security/cve/CVE-2024-34156
- externalhttps://access.redhat.com/security/cve/CVE-2024-45337
- externalhttps://access.redhat.com/security/cve/CVE-2024-45338
- externalhttps://access.redhat.com/security/cve/CVE-2025-59420
- externalhttps://access.redhat.com/security/cve/CVE-2025-61920
- externalhttps://access.redhat.com/security/updates/classification/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22182.json