Red Hat Security Advisory

RHSA-2025:3973

OpenShift Virtualization 4.16.7 Images

Released 2025-04-17 · Red Hat rating Important · View on Red Hat →

Fixed in

CNV 4.16 for RHEL 9 container-native-virtualization/aaq-controller-rhel9, container-native-virtualization/aaq-operator-rhel9, container-native-virtualization/aaq-server-rhel9 +47

Fixes 2 records

TI-2024-16308 CVE-2024-24791 · GHSA-hw49-2p59-3mhj

Denial of service due to improper 100-continue handling in net/http

MEDIUM 42

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01414 Published 2024-07-02 Partial fix · 1.21.12, 1.22.5

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333