RHSA-2024:7213LowCVSS 8.8

Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.4 LTS

Published
September 26, 2024
Last Modified
October 16, 2026

🔗 CVE IDs covered (10)

CVE-2024-6345 →CVE-2024-6923 →CVE-2024-37370 →CVE-2024-37371 →CVE-2024-45490 →CVE-2024-45491 →CVE-2024-45492 →CVE-2024-2398 →CVE-2024-6119 →CVE-2024-34397 →

📋 Description

CVE-2024-2398 — curl: HTTP/2 push headers memory-leak CVE-2024-6119 — openssl: Possible denial of service in X.509 name checks CVE-2024-6345 — pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools CVE-2024-6923 — cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-34397 — glib2: Signal subscription vulnerabilities CVE-2024-37370 — krb5: GSS message token handling CVE-2024-37371 — krb5: GSS message token handling CVE-2024-45490 — libexpat: Negative Length Parsing Vulnerability in libexpat CVE-2024-45491 — libexpat: Integer Overflow or Wraparound CVE-2024-45492 — libexpat: integer overflow

🎯 Affected products7

  • 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-config-sync-rhel9@sha256:025f8c5b4ea63567a49b79945932e877f2279bc149c832283226a8488590ab37_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-flow-collector-rhel9@sha256:c338911564f18192114799711b16bc3015da0f53cbc9eb44418b6d1e78864bf9_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-operator-bundle@sha256:b6d7798d7fdfd40662f0d479efe7eb35414cbbd3643ea02cd05c71aeea020ffb_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-router-rhel9@sha256:0f7be97ca4fabb79ff77557429f0d08118eb5afc4e7322361493d322ae57cd08_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-service-controller-rhel9@sha256:2da6dba7b2c9a47d0eedd7915a470d1a4e435848962ba39c72b8ea0d2bc9c1d8_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-site-controller-rhel9@sha256:04dd17efae41b6d7e07fd89b8eddca076dfea7cb4e603a83c5c4e27062ef4c90_amd64 as a component of 9Base-Service-Interconnect-1.4

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (9)