RHSA-2025:1487 - Security Advisory

Topic

Updated container images are now available for Discovery 1.12.1.

Description

The Discovery container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to these new images specifically, or to the latest images generally.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Discovery 1 x86_64

Fixes

• BZ - 2342118 - CVE-2022-49043 libxml: use-after-free in xmlXIncludeAddNode
• BZ - 2342757 - CVE-2024-12797 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

CVEs

• CVE-2020-11023
• CVE-2022-49043
• CVE-2024-12797
• CVE-2024-53104

References

• https://access.redhat.com/security/updates/classification/#important