RHSA-2025:1454 - Security Advisory

Topic

An updated Red Hat Developer Hub 1.3 on RHEL 9 container image is now available.

Description

The Red Hat Developer Hub 1.3 on RHEL 9 container image has been updated to address the following CVEs:

• CVE-2025-22150

Users of Red Hat Developer Hub 1.3 on RHEL 9 container images are advised to
upgrade to these updated images, which contain patches to mitigate
the listed CVEs. Users of these
images are also encouraged to rebuild all container images that depend on these
images.

You can find images updated by this advisory in Red Hat Container Catalog (see
References).

Solution

For more information, see the links available in the References

Affected Products

• Red Hat Developer Hub 1 x86_64

Fixes

• BZ - 2339176 - CVE-2025-22150 undici: Undici Uses Insufficiently Random Values
• RHIDP-5818 - RHDH 1.3.5 Release

CVEs

• CVE-2019-12900
• CVE-2024-9287
• CVE-2024-34156
• CVE-2025-22150

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://docs.redhat.com/en/documentation/red_hat_developer_hub/1.3