RHSA-2024:4865MediumCVSS 7.8

Red Hat Security Advisory: Red Hat Service Interconnect security update

Published
July 25, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2023-6597 →CVE-2024-0450 →CVE-2024-6535 →

📋 Description

CVE-2023-6597 — python: Path traversal on tempfile.TemporaryDirectory CVE-2024-0450 — python: The zipfile module is vulnerable to zip-bombs leading to denial of service CVE-2024-6535 — skupper: potential authentication bypass to skupper console via forged cookies

🎯 Affected products7

  • 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-config-sync-rhel9@sha256:b5f38e37a967fc4373bfca1dd7859dd8c236741e0bd1d08ffd368f5210adf9c0_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-flow-collector-rhel9@sha256:9c219837b8c9d91879e49c3600a617d911d6bf849fac38a4e202e0117f72a56e_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-operator-bundle@sha256:8dfcba321df37b69848ae80b106e00cf3ea0228a5e355ab033aa345140b14966_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-router-rhel9@sha256:a100f9a030f00747fcfd0f4a5db31a0c0c383a7c1c09d3bde3ab50340c21a46b_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-service-controller-rhel9@sha256:a403092339ae2ee410200417701b4ffe69a08bd652f832949b646974d6178c3d_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-site-controller-rhel9@sha256:866760e5ba2402b5d21ea92898a8a1e489ef09a3ac41dcd3847b512bfff0c9bd_amd64 as a component of 9Base-Service-Interconnect-1.4

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)