RHSA-2025:21929MediumCVSS 5.3

Red Hat Security Advisory: RHSA 4.9.1 security and bug fix update

Published
November 24, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2025-9648 →

📋 Description

CVE-2025-9648 — civetweb: Denial of Service in CivetWeb

🎯 Affected products46

  • Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:048ac5be7cca995f1b204d40770c136d901b9e1af396ff69ed70dc2e466065be_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0516e35aaa1b169369dea0548441b3eb48693b7840f8c43389f0877e49e384ef_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:3d51a3937a191b25cc7493f50bdf89764e6dd7ea71b9c3ebf0638bf2cf886fe4_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:9db350dff2d70fba2ecd96a8d38cbc33465918158c4bc6cca64e843d4fea7351_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:59dd5e6cb07cf38e499d909e1c07969db6a750a941051a4f6f7c2fb11ec16cd4_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:66ec9c8c40011633c6f62dfb1b0d238ac1dac8aa694c6bccc67d55bb3bb058da_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bb30abe978ff9a89ef5f954d26a2536a40327f2d40bc58a75287eeb9a17e9cca_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d1097b8171d9bd2bc615eee808f636a23a6851ded7b9905262fadddb80fcd2f5_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:03c538b33fa59664df308f5aa48da41d02f66776dc7b85e2324ca112281026ff_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7593d87f2d998c9c56962556b842f082925b7935fd7b7f95edea04b83f11ce75_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:8d611251d3d67b3aca2398dda90cb8eb56f7e331ec23000874777212d51b4a31_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dac67711119d5e3578c03c37cb18721814934d7fd77912b7cc9be9713e9eba6d_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:9312c096fef02f70b642551338fdf968ec6657ff0385f51c13767d8b29afc76d_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:0fa04ecf006d957fc41116f3050f34a96389ecfc47a055192e29b6bdca125f23_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:618055e7ace15b8d361c778876e42b720a1c7c80bc64297706a3a665663cdd55_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:72c1223dc5b47a171293348b9982006b267183cdecd30457921631feae7fb109_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9d298a3250713a7ecf4808c7ac117139005f64cdcebc2721d1cab98e65be37e0_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:38fda2955f943703c0868455353d532516b9d187b204245e0ce3ae40d72a7ac2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3a0e03dab464ba6bd0150c7bc0a793e8b3bcc164768604f0b3b164bf01df1aad_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:419b6f6d32f5c624649e90b512e2e2ffd784550ae37230bbbac6754ac78fba03_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:b6936790b0871fa2d91e7a3407597f3d4121879369a5d6653dd7db07e89ff3c7_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:030836264289258d8f82a74a212e5aedfcf04fabad50ec19c7d2630c3e045a2a_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4d330b0749db57bd6dfb3a5495030ecf1ea0f2aa24513294482e95802775aa16_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8fe12570480818308fadb3d60dbc952a0acaefed8536c2aa371476df425a514c_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9975471a286cf518176b2d102ff7fdbe05400430ca73cac8e0d7761ede4bbbf0_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:12009c702af96cd507fac6c8736c16434646f7fcd0aad7e2a0816673761b2c84_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4d63f7e015a525f235c6ec1e28f29a75b613d200c73bd3c907a95ebe98397379_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7e38a8e2075d98e45813bdc29ed4cca107062093db05b3160ae9f0e95274dbb2_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e27bd13cf061a3a5efcdf1f408ae56d46351e3f4f75a9ed9e014c7d356328366_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • +16 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)