RHSA-2025:1249 - Security Advisory

Topic

Updated container images are now available for Discovery 1.12.

Description

The Discovery container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to these new images specifically, or to the latest images generally.

Fixed CVEs:
CVE-2024-39338
CVE-2024-56201
CVE-2024-45590
CVE-2024-41991
CVE-2024-42005
CVE-2024-41989
CVE-2024-8775
CVE-2024-43799
CVE-2024-43796
CVE-2024-43800
CVE-2024-45296
CVE-2024-43788
CVE-2024-21536
CVE-2024-56326
CVE-2024-21538
CVE-2020-11023
CVE-2024-55565
CVE-2023-44270
CVE-2024-6485
CVE-2024-53907
CVE-2024-56374
CVE-2024-52798
CVE-2024-31449
CVE-2024-46981
CVE-2024-31228

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Discovery 1 x86_64

Fixes

• DISCOVERY-895 - Release discover-server and discovery-ui 1.12

CVEs

• CVE-2020-11023
• CVE-2023-44270
• CVE-2024-6485
• CVE-2024-8775
• CVE-2024-21536
• CVE-2024-21538
• CVE-2024-31228
• CVE-2024-31449
• CVE-2024-39338
• CVE-2024-41989
• CVE-2024-41991
• CVE-2024-42005
• CVE-2024-43788
• CVE-2024-43796
• CVE-2024-43799
• CVE-2024-43800
• CVE-2024-45296
• CVE-2024-45590
• CVE-2024-46981
• CVE-2024-52798
• CVE-2024-53907
• CVE-2024-55565
• CVE-2024-56201
• CVE-2024-56326
• CVE-2024-56374

References

• https://access.redhat.com/security/updates/classification/#important