RHBA-2025:15621 - Bug Fix Advisory

Topic

OpenShift container images for the Red Hat Service Interconnect 1.9 release.

Description

Red Hat Service Interconnect 1.9 creates a service network, linking
TCP and HTTP services across the hybrid multicloud.
A service network enables communication between services running in different network locations or sites.
It allows geographically distributed services to connect as if they were all running in the same site.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Service Interconnect 1 for RHEL 9 x86_64
• Red Hat Service Interconnect 1 for RHEL 9 s390x
• Red Hat Service Interconnect 1 for RHEL 9 aarch64

Fixes

• SKUPPER-2798 - python: cpython: Arbitrary writes via tarfile realpath overflow
• SKUPPER-2799 - libxml: Heap use after free (UAF) leads to Denial of service (DoS)
• SKUPPER-2800 - libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
• SKUPPER-2801 - sqlite: Integer Truncation in SQLite
• SKUPPER-2802 - cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction director

CVEs

• CVE-2022-29458
• CVE-2024-52533
• CVE-2025-3576
• CVE-2025-4373
• CVE-2025-5914
• CVE-2025-6965
• CVE-2025-8058
• CVE-2025-32414
• CVE-2025-32415

References

• https://docs.redhat.com/en/documentation/red_hat_service_interconnect/1.9/