Red Hat Security Advisory

RHSA-2025:23236

Red Hat Lightspeed (formerly Insights) for Runtimes 1.0.0: new RHEL 9 container image security update

Released 2025-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator

TI-2025-16746 CVE-2025-22874 · GHSA-6f52-wpx2-hvf2

LOW 39

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00376 Published 2025-06-11 Partial fix · 1.24.4

TI-2025-10435 CVE-2025-11393 · GHSA-cc8c-28gj-px38

LOW 39

A flaw was found in runtimes-inventory-rhel8-operator.

CVSS 3.1HIGH 8.7 Adjacent network Low privileges No interaction EPSS 0.00196 Published 2025-12-15 Partial fix · 1.0.0-1765483112 CWE-441