Red Hat Security Advisory

RHSA-2025:1925

Updated service-interconnect rhel9 container images for 1.5

Released 2025-02-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5

Fixes 2 records

TI-2024-11859 CVE-2024-12797 · GHSA-79v4-65xg-pq4g

RFC7250 handshakes with unauthenticated servers don't abort as expected

LOW 38

Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verificat…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01857 Published 2025-02-11 Partial fix · 3.4.1, 3.3.3 +2 CWE-392

TI-2022-24561 CVE-2022-49043 · GHSA-84p5-cqqq-h4gr

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

LOW 37

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00265 Published 2025-01-26 Partial fix · 2.11.0 CWE-416