RHSA-2025:1925HighCVSS 7.4

Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.5

Published
February 27, 2025
Last Modified
August 17, 2026

🔗 CVE IDs covered (2)

CVE-2022-49043 →CVE-2024-12797 →

📋 Description

CVE-2022-49043 — libxml: use-after-free in xmlXIncludeAddNode CVE-2024-12797 — openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

🎯 Affected products31

  • Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:30115c9b2120a26e484146dc71c12b29a30ecd485c81fd5fb29e5e4389861759_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:bcd9b1eebb1e5491e884a4a5e857e6743eee0332369d3cac4215705a2eaec3db_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:d6de7a6622cedd4dc3ac6afa2a73e606cb8510473c7032398d9f2b53e4d64899_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:fbb0e80f748e6a82070fe1ac15e161cdfa969fe9eee421540ddc5ccd79bccb9f_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:21db1ab4bbe383754294a19f33a3ccbe40f499f5f2df7624381bd4f11602c8fa_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:4580138c3932022cd533df65518ca737af69d606072c1856cb9fa66d4100e713_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:8b7b9fe664ef3dc5a6b218c815f1edcabec541173e0e9a83e07527ed732dfe84_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:21db1ab4bbe383754294a19f33a3ccbe40f499f5f2df7624381bd4f11602c8fa_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:4580138c3932022cd533df65518ca737af69d606072c1856cb9fa66d4100e713_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:8b7b9fe664ef3dc5a6b218c815f1edcabec541173e0e9a83e07527ed732dfe84_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:0a67d970179bd8ba17269188a7efb7bb1eb4a95767785493cfeab16202900805_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:7356a4434fec942da25a1e5b07ccc275227f25014677bf1a4f8219be366ad5ba_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:9b163afc57029a88e40d8d4f01debcb23e6fe16e62e40516223460a4a6a68c8b_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:b64e0bbaf2908375c035b39eb2a2f6555e51ad1038f508f43ab17c336455e9df_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-operator-bundle@sha256:aa261c79b421bd49f7b46974a3bb5a790d5a1a73dd8dea4e1d8a4634fb68a51f_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-operator-bundle@sha256:c69e4d0fead7f1c7ebcf8ba6db15174834fc3f7e688c30e2cae909a97dfa69f6_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:5230df96174fd1e853df6bd260995c3d2183d46a3c7e904c512cc27935d90212_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:76b56fc2b2f1207ad55d35ed417514392bc493b42bf6b59559a88d9498da3a87_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:8f56e9305e12338e06da08df969352343d0628d849e48e0f3680a511219dddb3_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:a938aca556d341ffa28f15f802ee37a9b006080133a331bfed91b0b33e0a6a58_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:1d251d69f7bc5829be1382243c1726bd840effe9dcfe38ec88ab39766a56641f_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:5171946a13799ac7f8418401cc52570de6f8461bf7f7dbb24e61e95c595dfd6d_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:60ef9cb82e10b5a0df32a7b7d9608a88757d12aeaefa78f5baa015c5d5c6c022_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:ffa3fc0b945eaaa5d36c4bf7d5695b6822094efdaf0630227e32cba1997bd3c1_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:365ec90eb7c5f438d2732e574e5c19ae206f4911aa674c1eb8dcfb73f7b35d1a_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:5afb52c741b2261f5e7a93c16d625363fdc2f0db7189272a73e9cf9f521deef6_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:685a0f17bc225b89e93bb7abc2a487ef0607d16b2e6c534df46483d83ccb1213_amd64 as a component of Red Hat Service Interconnect 1
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)