Red Hat Security Advisory

RHSA-2025:0905

RHOAI 2.16.0 - Red Hat OpenShift AI

Released 2025-02-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel8, registry.redhat.io/rhoai/odh-rhel8-operator, registry.redhat.io/rhoai/odh-training-operator-rhel8 +1

Fixes 1 record

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333