RHSA-2025:1925 - Security Advisory

Topic

Updated service-interconnect container images are now available for Service Interconnect 1.5 for RHEL 9.

Description

Users of service-interconnect 1.5 rhel9 container images are advised
to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs.
Users of these images are also encouraged to rebuild all container images that depend on these images.
You can find images updated by this advisory the in Red Hat Container Catalog

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Service Interconnect 1 for RHEL 9 x86_64
• Red Hat Service Interconnect 1 for RHEL 9 aarch64

Fixes

• BZ - 2342118 - CVE-2022-49043 libxml: use-after-free in xmlXIncludeAddNode
• BZ - 2342757 - CVE-2024-12797 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

CVEs

• CVE-2019-12900
• CVE-2020-11023
• CVE-2022-49043
• CVE-2024-9287
• CVE-2024-11168
• CVE-2024-12797

References

• https://access.redhat.com/security/updates/classification/#important