RHSA-2025:4005HighCVSS 8.1

Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.8

Published
April 17, 2025
Last Modified
July 27, 2026

🔗 CVE IDs covered (3)

CVE-2024-12797 →CVE-2024-56171 →CVE-2025-24928 →

📋 Description

CVE-2024-12797 — openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-56171 — libxml2: Use-After-Free in libxml2 CVE-2025-24928 — libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

🎯 Affected products31

  • Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:a91959f9373e633bdf1973d047c1472ee1b6ae6dfa67d14a4731e3a52fbcf6cb_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:b0ada4fa5af4694c2f5dc4093847d99bf282f2182d78ef1947011cf0fa64c819_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:c83bfa8e4f958893ff111f0800e485ea5e14c7e13be874d67970a77c1656de9f_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-config-sync-rhel9@sha256:d7d209693ac31133ab96bbe989bc363228e183c9a44be3fddfd6cf0a72701752_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:22b18fa3f92f6868e07ae079761e44e8d2de5a0d370ec6f10ee32214175c09df_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:2495b9140d01e6954da03935e3ed2b708a9e2cfa92812224218b6abf2eeff498_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:700a8bb8682312fd9ad6cd8e0a7fafd8367f231a8222d87f356141a22dceb43e_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-container-rhel9@sha256:7a65a26dc61968eca4ea300b41ab42ae1cae91b03cb3bbc1b21b9a33d9b80a0c_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:22b18fa3f92f6868e07ae079761e44e8d2de5a0d370ec6f10ee32214175c09df_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:2495b9140d01e6954da03935e3ed2b708a9e2cfa92812224218b6abf2eeff498_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:700a8bb8682312fd9ad6cd8e0a7fafd8367f231a8222d87f356141a22dceb43e_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-controller-podman-rhel9@sha256:7a65a26dc61968eca4ea300b41ab42ae1cae91b03cb3bbc1b21b9a33d9b80a0c_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:1d7610a260bca96e6672bb4ee0c3902ef638dd687ad4585c352f1421306a4194_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:8172dcc2d84f8d6c8f347f2d86158d891c9483ffd97715bb085a1dc25c6fdcb1_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:b78b52b9c290f57ee2d43b37d0253e19707f5a0ef7d010b1c5ee762c0d49ee0c_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-flow-collector-rhel9@sha256:de06b15c6049c92834629fc58a5753344d53daa669b424c65bf5d0092c8224be_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-operator-bundle@sha256:3c332a0f3bdb3e4e6fb19855958fd7528c1bd39371e358c8cec621244f54c6d9_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-operator-bundle@sha256:bfd1ed30aaa0296102c8b04512c2356118938ff335d01e91e31ed0dff7607e9b_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:6be9ca0e7409ad9f9a830d88005d7c9d8130e9c913fb208d114d8904ae27ffef_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:7220e7dc2c3c44f094c6bd9f7053ba4729d076868ffdec5a0bba2443cf43e540_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:c75fe0bf54e0528872626344d4437cbf4da95415b2a72fb9eb74f4c805af9f34_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-router-rhel9@sha256:f86fd72e06c1631728a983054a87dbda63fea2c44cf7fa0754580f70f25ba20d_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:14cba26cd1079d17d13a9bc9bc1aa088554c4cf59b0630ad84a981d7de4c0bc6_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:24c3150556113670688afc6ce7595e818829741f80d59302ff08c9f71bb8f6fb_amd64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:2cf8284f6880701d3a5f48467376e64964a2e8a59e8fa882fe10af6192888b01_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-service-controller-rhel9@sha256:367add17713f74c7c1dddda8b4432ba1cdf0fe4580a93c0b130f44a889ab451d_s390x as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:624c1c8d91847d6701bd3c67374bbe9f8da6968fc7d00237d56b811eb5fe2a8a_ppc64le as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:9648499b769035b5b0395d431c2f591730e564bc0a82048c2a755f62e0e737c9_arm64 as a component of Red Hat Service Interconnect 1
  • service-interconnect/skupper-site-controller-rhel9@sha256:ee56d1581145bee854ec9f47e0738e01e1c6eb8bf32b87d42c3fe69808aebc1a_amd64 as a component of Red Hat Service Interconnect 1
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)