Skip to content
OpenAdvisories
Medium RHSA-2025:9514 1 CVE

Red Hat Security Advisory: rhc security update

Published Jun 25, 2025 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 rhc 1:0.3.2-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rhc-debuginfo 1:0.3.2-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rhc-debugsource 1:0.3.2-1.el10_0

Vulnerabilities 1

  • Medium 6.1
    CVE-2024-45336

    Sensitive headers incorrectly sent after cross-domain redirect in net/http

    The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subs…

    Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2341751
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9514.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-45336
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-45336
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-45336
  • article
    https://github.com/golang/go/issues/70530
  • article
    https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI