RHSA-2025:4240HighCVSS 7.5

Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.

Published
April 28, 2025
Last Modified
September 18, 2026

🔗 CVE IDs covered (6)

CVE-2023-39325 →CVE-2023-45288 →CVE-2024-24788 →CVE-2024-24789 →CVE-2024-24790 →CVE-2024-34156 →

📋 Description

CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2024-24788 — golang: net: malformed DNS message can cause infinite loop CVE-2024-24789 — golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

🎯 Affected products19

  • Red Hat Ceph Storage 6.1 Tools
  • rhceph/keepalived-rhel9@sha256:1c95dcc53d4cc7c694e5a11f7b39b6476d90cf3708358a1cc65f72ec0d38c46c_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/keepalived-rhel9@sha256:54cc52c368304c72657c43fb82142a7a9a5160cc3a6f244052bfdd5261ea99fd_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/keepalived-rhel9@sha256:c3b6856a4d946ec48d8c60d15faf95123268b1b73bc1a01510fc40a04274ec06_s390x as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-dashboard-rhel9@sha256:5ecf105bc936d0c37346e1091af73bca69f9c07e226ccd87290a22ec1d37d1a3_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-dashboard-rhel9@sha256:6556cb524258d4066898583912e167c311d3f4224e002eda0d78c061addb4aa5_s390x as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-dashboard-rhel9@sha256:7c48e5f5655db34fa346aed3a7a7e8e109c0d4f40c820f109494daf81046d791_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-rhel9@sha256:5e300275660b37e5017b2fd3f614adb2ae96d59e434ea931ce2778aa5f51fd06_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-rhel9@sha256:6158d287db74defd81c382f5f2c3304ee730064bdc9823dee440dbb325b2e5c8_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-6-rhel9@sha256:c7194cc27e4be27a21369eaf28b7481f0133db221a6f0781ffcb2d9ca947e0db_s390x as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-haproxy-rhel9@sha256:615a46aeac92682b400010a81afcc7b69cb506bee102c69dfd94d43423db1853_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-haproxy-rhel9@sha256:63db781d5e639ea19a72f2cde5d47dea7fe0afe5206e6ebe476052563eb6a3cd_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-haproxy-rhel9@sha256:862fed90f9699602ebd5858fc04377d87c3f30c826847f3e0a61d48c49e162f1_s390x as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-promtail-rhel9@sha256:5f55baba4c52c19c4d28faf0cf5dee64720d6e49c8081ccd38574d7c2960a98b_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-promtail-rhel9@sha256:b0d41dceb48071c537314247409226329f55cc2bd9b902066ca065f73e017b8f_s390x as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/rhceph-promtail-rhel9@sha256:c9cb503a6216553906461e897adbd3410b1cdf1876b56b0d6ce179f6851cfbbc_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/snmp-notifier-rhel9@sha256:14dc3601abdef2e5334372ab553abb47300ca61245fc50193e48213a82211a45_amd64 as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/snmp-notifier-rhel9@sha256:4fbb6836a47696dde61e2235666f4d0d8b32ed63772958407c30385b741626da_ppc64le as a component of Red Hat Ceph Storage 6.1 Tools
  • rhceph/snmp-notifier-rhel9@sha256:e3a49a1c07604fa64a5970403841ea9cddec05e5d9b558c5681e3ade60ab38ea_s390x as a component of Red Hat Ceph Storage 6.1 Tools

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2789521 For supported configurations, refer to: https://access.redhat.com/articles/1548993 Workaround: The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2. Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)