Critical Security Update for weldr-client: CVE-2025-22871
Summary
RHSA-2025:9845: Red Hat Security Advisory: weldr-client security update. Affects weldr-client versions < 0:35.12-3.el8_10. Fixed in 0:35.12-3.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The weldr-client is a component of the Red Hat Enterprise Linux 8 AppStream, primarily used for managing and deploying containerized applications. It offers functionalities such as image management and deployment, making it essential for developers and system administrators. However, it has been identified to have a security vulnerability that could potentially expose sensitive data.
Vulnerability Detail
The vulnerability identified as CVE-2025-22871 affects the weldr-client package, allowing unauthorized access to sensitive information due to improper input validation. This flaw could lead to data leakage, compromising the confidentiality of the system. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level, and it is crucial for users to address this issue promptly to mitigate potential risks.
How To Fix
Minimum fixed version
0:35.12-3.el8_10
This is the first release that contains the fix.
sudo dnf update weldr-clientTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the weldr-client functionalities until the update is applied. This can be achieved by modifying user permissions or disabling the service until the patch is installed.
Conclusion
The weldr-client package has a critical vulnerability (CVE-2025-22871) that needs immediate attention. Users are advised to update to the patched version to ensure the security of their systems. Utilizing tools like Vulert can help in monitoring and identifying vulnerabilities in real-time.
See every vulnerability recorded for weldr-client →
FAQ
CVE-2025-22871 is a security vulnerability in the weldr-client package that allows unauthorized access to sensitive information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 5.4, indicating a moderate severity level.
If you cannot update the package immediately, consider restricting access to the weldr-client functionalities as a temporary workaround.
For more information about open-source vulnerabilities, you can visit Vulert at https://vulert.com, which monitors and alerts for vulnerabilities using a manifest file.
Related vulnerabilities
Recent vulnerabilities recorded for weldr-client.
