Red Hat Security Advisory

RHSA-2025:1487

updated discovery container images

Released 2025-02-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Discovery 1 for RHEL 9 discovery/discovery-server-rhel9, discovery/discovery-ui-rhel9

Fixes 2 records

TI-2024-11859 CVE-2024-12797 · GHSA-79v4-65xg-pq4g

RFC7250 handshakes with unauthenticated servers don't abort as expected

LOW 38

Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verificat…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01857 Published 2025-02-11 Partial fix · 3.4.1, 3.3.3 +2 CWE-392

TI-2022-24561 CVE-2022-49043 · GHSA-84p5-cqqq-h4gr

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

LOW 37

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00265 Published 2025-01-26 Partial fix · 2.11.0 CWE-416