enterprise_linux_appstream_e4s_v_9_0 vulnerabilities

CVEs whose affected-version data names the enterprise_linux_appstream_e4s_v_9_0 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2025-47913High· 7.5

10mo ago

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)

A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an une…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream E4S (v.8.6)EPSS 0.62%via CSAF

CVE-2025-8194High· 7.5

1y ago

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and dea…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.64%via NVD