RHSA-2025:4240HighCVSS 7.5

Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.

Published
April 28, 2025
Last Modified
May 29, 2026

🔗 CVE IDs covered (5)

CVE-2023-39325 →CVE-2023-45288 →CVE-2024-24789 →CVE-2024-24790 →CVE-2024-34156 →

📋 Description

CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2024-24789 — golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

🔗 References (4)