RHSA-2025:1249HighCVSS 7.5

Red Hat Security Advisory: updated discovery container images

Published
February 10, 2025
Last Modified
August 24, 2026

🔗 CVE IDs covered (25)

CVE-2024-21538 →CVE-2024-43799 →CVE-2024-43800 →CVE-2024-53907 →CVE-2024-56201 →CVE-2023-44270 →CVE-2024-8775 →CVE-2024-41991 →CVE-2024-45296 →CVE-2024-45590 →CVE-2024-46981 →CVE-2024-52798 →CVE-2024-55565 →CVE-2020-11023 →CVE-2024-6485 →CVE-2024-21536 →CVE-2024-42005 →CVE-2024-43788 →CVE-2024-56326 →CVE-2024-56374 →CVE-2024-31228 →CVE-2024-31449 →CVE-2024-39338 →CVE-2024-41989 →CVE-2024-43796 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2023-44270 — PostCSS: Improper input validation in PostCSS CVE-2024-6485 — bootstrap: Cross-Site Scripting via button plugin on bootstrap CVE-2024-8775 — ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging CVE-2024-21536 — http-proxy-middleware: Denial of Service CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-31228 — redis: Denial-of-service due to unbounded pattern matching in Redis CVE-2024-31449 — redis: Lua library commands may lead to stack overflow and RCE in Redis CVE-2024-39338 — axios: axios: Server-Side Request Forgery CVE-2024-41989 — python-django: Memory exhaustion in django.utils.numberformat.floatformat() CVE-2024-41991 — python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget CVE-2024-42005 — python-django: Potential SQL injection in QuerySet.values() and values_list() CVE-2024-43788 — webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser CVE-2024-46981 — redis: Redis' Lua library commands may lead to remote code execution CVE-2024-52798 — path-to-regexp: path-to-regexp Unpatched path-to-regexp ReDoS in 0.1.x CVE-2024-53907 — django: Potential denial-of-service in django.utils.html.strip_tags() CVE-2024-55565 — nanoid: nanoid mishandles non-integer values CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56374 — django: potential denial-of-service vulnerability in IPv6 validation

🎯 Affected products5

  • Discovery 1 for RHEL 9
  • discovery/discovery-server-rhel9@sha256:b41eeb83e5c7ad9937a90ac6247fe5305a7ff90b39ae6a23765e0f2e22bdca70_arm64 as a component of Discovery 1 for RHEL 9
  • discovery/discovery-server-rhel9@sha256:c6488740a778ca3a1aa3dfdc513d4989ac366728d9f93fe8a57a51c562270771_amd64 as a component of Discovery 1 for RHEL 9
  • discovery/discovery-ui-rhel9@sha256:c5a4ba16f7322e2b89fefa198dc673434f73709a47cf7a85bbccf1ba7a73dd7c_arm64 as a component of Discovery 1 for RHEL 9
  • discovery/discovery-ui-rhel9@sha256:c6f7be7cb58e77958c518fdd68c80a745dcec48fa5397af8c68593254e03743a_amd64 as a component of Discovery 1 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: There's no known mitigation for this issue. Red Hat recommends to not parse untrusted CSS input using PostCSS. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat Product Security does not have any mitigation recommendations at this time. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. Workaround: Avoid using two parameters within a single path segment when the separator is not, for example, /:a-:b. Alternatively, you can define the regex used for both parameters and ensure they do not overlap to allow backtracking. Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.

🔗 References (4)