RHBA-2025:3538HighCVSS 7.5

Red Hat Bug Fix Advisory: Red Hat Quay v3.9.11 bug fix release

Published
April 30, 2025
Last Modified
October 31, 2026

🔗 CVE IDs covered (4)

CVE-2025-22869 →CVE-2025-27516 →CVE-2024-6827 →CVE-2025-22868 →

📋 Description

CVE-2024-6827 — gunicorn: HTTP Request Smuggling in benoitc/gunicorn CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-22869 — golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-27516 — jinja2: Jinja sandbox breakout through attr filter selecting format method

🎯 Affected products11

  • Quay v3
  • quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64 as a component of Quay v3
  • quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64 as a component of Quay v3

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat Product Security currently does not have a recommended mitigation at this time. Workaround: To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters. Workaround: This flaw can be mitigated when using the client only connecting to trusted servers. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (2)