RHEA-2025:23138 - Product Enhancement Advisory

Topic

Red Hat 3scale API Management 2.16.1 Release - Container Images

Description

Release of 3scale API Management components provides these changes:

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_3scale_api_management/2.14/html-single/installing_3scale/index

Affected Products

• Red Hat 3scale API Management Platform 2 for RHEL 8 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 8 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 8 ppc64le
• Red Hat 3scale API Management Platform 2 for RHEL 7 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 7 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 7 ppc64le

Fixes

• THREESCALE-11920 - Upgrade zync-db to PostgreSQL 15
• THREESCALE-12001 - Oracle instance throws 500 on any creation or update of 3scale objects
• THREESCALE-12053 - Prepare APIcast operator v2.16.1
• THREESCALE-12052 - Prepare 3scale operator v2.16.1
• THREESCALE-12056 - Upgrade rack for apisonator - backport for 2.16
• THREESCALE-12013 - after upgrading to 2.16 system-app has still old db schema
• THREESCALE-11114 - Usage Rules at master portal missing translation
• THREESCALE-11383 - cannot remove buyer account when test stripe gateway is configured
• THREESCALE-11631 - Error when a backend reference is removed from usages and application plan limit is removed too
• THREESCALE-5105 - Mutual TLS between APIcast and the Backend API fails when using a Forward Proxy
• THREESCALE-8920 - Support PostgreSQL 14 in System and Zync
• THREESCALE-11498 - 3scale API docs CRUD /api/account_plans/{acc_pl_id}/features.xml not working
• THREESCALE-9335 - Developer portal: builtin toggling code for legal terms contains a Javascript bug

CVEs

• CVE-2013-0340
• CVE-2022-23990
• CVE-2024-28757
• CVE-2024-56433
• CVE-2025-5318
• CVE-2025-6965
• CVE-2025-9230
• CVE-2025-38351
• CVE-2025-38498
• CVE-2025-39697
• CVE-2025-39718
• CVE-2025-39881
• CVE-2025-39971
• CVE-2025-39982
• CVE-2025-39983
• CVE-2025-40047
• CVE-2025-53905
• CVE-2025-53906
• CVE-2025-59375

References

(none)