RHSA-2025:3867HighCVSS 8.1

Red Hat Security Advisory: Network Observability 1.8.1 for OpenShift

Published
April 14, 2025
Last Modified
October 13, 2026

🔗 CVE IDs covered (2)

CVE-2025-24928 →CVE-2024-56171 →

📋 Description

CVE-2024-56171 — libxml2: Use-After-Free in libxml2 CVE-2025-24928 — libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

🎯 Affected products22

  • Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:6fae298c2ba0d2535c1dc72d8f57d1f298701245d7275022f638a4191a6c3192_arm64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:c22a176bbbcefb262a7af423e0e08132d09e49d9cc596380cedcca2aacaf8352_s390x as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:df5f85190d07444a9162e1040e05c2c29db5a539cbde3039118eec23cc43bee4_amd64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:e8447a2da5f42fc28ea23d4ced948aa8803c5d8a344f970b79adffb06cc07f37_ppc64le as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:201ed271b65821dda567f604fd4900ce36a60f5051460c5459ee4d57c2d3ffa7_ppc64le as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5ccbb51163097a36d9fbcdac81458f3ffc9b338c18d6e673d0ab55597ee0a499_s390x as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:92a89451c9c7f6a2ba480924edb3fd67f744288102c052e259f675a7f94b8e71_arm64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:96fe24f6cc99779a2cc38a11ff61983910fa776d536e2478852aa4d25a2267a1_amd64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f50d0688ceb8e770396620fa683d69a372ce694ce76be051f11d1a1ade35cc6_arm64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:5bc92950609e6c252d9a027f347ef33ad11599dd27baf703228890f5e85b083d_ppc64le as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:ba662216d63dae14fd938fff9245604a6c5b60b2fcf9459205b1dea6854fa7df_s390x as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:c918c9adc2cf2d13c8080e5435e8dc1d1766c0b28c8f13e755f39e0a1b6b0fb2_amd64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:21df605ab38417d4600ddec6c5c57c55c38a20471ca6573fe96adcdd731ad4ec_arm64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:6b212006d1c4c91cb4532c22162fe719f8510fce9d2e34bf504ea4d9f8338346_amd64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a6a6fe9f757e66fb892cfc0a04a488f82e3f63e22e9ca547180de3a49749fe3d_s390x as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:d7c2f0bfade7552f8f9842f82b36c22a860e3c90e1cf633962c5295fb6bba806_ppc64le as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:abf372f07ca49997f9298c73820542f001327680452f87f7d594e532f794dd23_amd64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:3ff12a979feb3b4a2b69f5e7e253eebea703d334e295aefe36884d91e48dd901_ppc64le as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c284278b38c431f87b8ee743dabfd10ea24961dee76b7f8f3b3a84269a37993_s390x as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:79f0da62e69353353c60a615a21243a5ad02b1247062886f66b05b8f8b3c7b4a_arm64 as a component of Red Hat Openshift Network Observability 1.8.1
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:931c4ea56af3ced616830034f84b5b3a37bb6051d853605ba501db8cfe4887b3_amd64 as a component of Red Hat Openshift Network Observability 1.8.1

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)