VDB

RHSA-2025%3A1985

RHSA-2025%3A1985 PUBLISHED CVSS 7.400000095367432 HIGH

A flaw was found in OpenSSL's RFC7250 Raw Public Key (RPK) authentication. This vulnerability allows man-in-the-middle (MITM) attacks via failure to abort TLS/DTLS handshakes when the server's RPK does not match the expected key despite the SSL_VERIFY_PEER verification mode being set.

Risk Scores

CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatopenshift-logging/lokistack-gateway-rhel9@sha256:b72504f91b84de22d3bf729dd41b9e332c55b8e615d96fb9d820c223ea2b3bdc_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/lokistack-gateway-rhel9@sha256:b72504f91b84de22d3bf729dd41b9e332c55b8e615d96fb9d820c223ea2b3bdc_ppc64le
Red Hatopenshift-logging/logging-loki-rhel9@sha256:f9b34a964c6ef07f284f02b3015373058bae6487b490d9c06bb22adc97ce596c_s390x as a component of RHOL 5.9 for RHEL 9*
Red Hatopenshift-logging/opa-openshift-rhel9@sha256:558d1e28f23406c86e9a81de0386c8760bbce4607a41b54976bae8e316046ac8_ppc64le as a component of RHOL 5.9 for RHEL 9*
Red Hatopenshift-logging/log-file-metric-exporter-rhel9@sha256:90fb7da86b96e612eb2e5792f91c651383f0b924802e5adb38bc8c3438fc9947_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/log-file-metric-exporter-rhel9@sha256:90fb7da86b96e612eb2e5792f91c651383f0b924802e5adb38bc8c3438fc9947_ppc64le
Red Hatopenshift-logging/cluster-logging-rhel9-operator@sha256:24e8c777298eaad22b4ba4377bb40281b7a75022ad02e2a4671f0da4ab86fdff_amd64 as a component of RHOL 5.9 for RHEL 9openshift-logging/cluster-logging-rhel9-operator@sha256:24e8c777298eaad22b4ba4377bb40281b7a75022ad02e2a4671f0da4ab86fdff_amd64
Red Hatopenshift-logging/fluentd-rhel9@sha256:5591c4896d634481d947eb3a54576e07f0acff792ba863a0c3087f9af5c150e2_s390x as a component of RHOL 5.9 for RHEL 9*
Red Hatopenshift-logging/eventrouter-rhel9@sha256:f94ea569cfb249ae3ba5ed77d8a8de2624709c3262fb61821bcf4466bd1b9679_arm64 as a component of RHOL 5.9 for RHEL 9openshift-logging/eventrouter-rhel9@sha256:f94ea569cfb249ae3ba5ed77d8a8de2624709c3262fb61821bcf4466bd1b9679_arm64
Red Hatopenshift-logging/cluster-logging-rhel9-operator@sha256:6b4d17867f342c80119174af037319568da13562dfd3c0319cace2ec097b56bf_arm64 as a component of RHOL 5.9 for RHEL 9openshift-logging/cluster-logging-rhel9-operator@sha256:6b4d17867f342c80119174af037319568da13562dfd3c0319cace2ec097b56bf_arm64
Red Hatopenshift-logging/logging-loki-rhel9@sha256:4351b3f86d054b81035342c768efbc2d6add9f287879a52eb26dd167182be52a_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/logging-loki-rhel9@sha256:4351b3f86d054b81035342c768efbc2d6add9f287879a52eb26dd167182be52a_ppc64le
Red Hatopenshift-logging/opa-openshift-rhel9@sha256:4597bbf7d9e74912e841a7ce04482fec4af766dd3c78aff5590b5b4c603ab75b_amd64 as a component of RHOL 5.9 for RHEL 9openshift-logging/opa-openshift-rhel9@sha256:4597bbf7d9e74912e841a7ce04482fec4af766dd3c78aff5590b5b4c603ab75b_amd64
Red Hatopenshift-logging/eventrouter-rhel9@sha256:f86cc7235333b698c32f8cca0ef5b30432faaef6f741c74e2bd4cb7372b57784_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/eventrouter-rhel9@sha256:f86cc7235333b698c32f8cca0ef5b30432faaef6f741c74e2bd4cb7372b57784_ppc64le
Red Hatopenshift-logging/fluentd-rhel9@sha256:d56a8ce8304ebea3e31471b4cf76e93e859e176de09343b97d4e4dc5948d35fa_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/fluentd-rhel9@sha256:d56a8ce8304ebea3e31471b4cf76e93e859e176de09343b97d4e4dc5948d35fa_ppc64le
Red Hatopenshift-logging/lokistack-gateway-rhel9@sha256:973d6e68e17a1ab6acf00a4fb476a1a21ff051745a4d2a2aa48e09199eb61ee6_amd64 as a component of RHOL 5.9 for RHEL 9openshift-logging/lokistack-gateway-rhel9@sha256:973d6e68e17a1ab6acf00a4fb476a1a21ff051745a4d2a2aa48e09199eb61ee6_amd64
Red Hatopenshift-logging/loki-rhel9-operator@sha256:d2e3d0876a74b06a96b446444cb21ecb5ada1079a32ea4a9f31ac17717ff6329_arm64 as a component of RHOL 5.9 for RHEL 9openshift-logging/loki-rhel9-operator@sha256:d2e3d0876a74b06a96b446444cb21ecb5ada1079a32ea4a9f31ac17717ff6329_arm64
Red Hatopenshift-logging/opa-openshift-rhel9@sha256:eb993be4498a6e223d9af749da2a9cb806e24ef94b1616bfbf21b266e7e39013_arm64 as a component of RHOL 5.9 for RHEL 9openshift-logging/opa-openshift-rhel9@sha256:eb993be4498a6e223d9af749da2a9cb806e24ef94b1616bfbf21b266e7e39013_arm64
Red Hatopenshift-logging/opa-openshift-rhel9@sha256:972d09709f8497901132b6ef7bb0f90f99d4e037ec6b34924b3fb8c50a43bfd2_s390x as a component of RHOL 5.9 for RHEL 9*
Red Hatopenshift-logging/logging-view-plugin-rhel9@sha256:522daafc39886ccccfb5021677da932d915f6befc82a0e61bb3895224bf19f26_arm64 as a component of RHOL 5.9 for RHEL 9openshift-logging/logging-view-plugin-rhel9@sha256:522daafc39886ccccfb5021677da932d915f6befc82a0e61bb3895224bf19f26_arm64
Red Hatopenshift-logging/loki-rhel9-operator@sha256:00f258e7f36de191e78dcdb84c3234e86e4313f6c42e1a79843e07a2d5df6efa_ppc64le as a component of RHOL 5.9 for RHEL 9openshift-logging/loki-rhel9-operator@sha256:00f258e7f36de191e78dcdb84c3234e86e4313f6c42e1a79843e07a2d5df6efa_ppc64le
Red Hatopenshift-logging/vector-rhel9@sha256:8e022f187c2e05433697da4b1c8d2bfcfb9458a03fa81103e4b7ac2b0db1ae68_amd64 as a component of RHOL 5.9 for RHEL 9openshift-logging/vector-rhel9@sha256:8e022f187c2e05433697da4b1c8d2bfcfb9458a03fa81103e4b7ac2b0db1ae68_amd64
Red Hatopenshift-logging/cluster-logging-operator-bundle@sha256:0fd4b24fdc4ae0777f8c520128396a453d38970f47a4c9cf56e7bfcc27c73e19_amd64 as a component of RHOL 5.9 for RHEL 9openshift-logging/cluster-logging-operator-bundle@sha256:0fd4b24fdc4ae0777f8c520128396a453d38970f47a4c9cf56e7bfcc27c73e19_amd64

…and 22 more

Timeline

  • Mar 5, 2025 CVE Published
  • Apr 24, 2026 CVE Updated
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›