Red Hat Security Advisory

RHSA-2026:6481

Updated service-interconnect rhel9 container images for 1.8

Released 2026-04-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5

TI-2025-14107 CVE-2025-15467 · GHSA-wvhq-3h88-rf6g

CRITICAL 85

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.74793 Published 2026-01-27 Partial fix · 3.6.1, 3.5.5 +3 CWE-787

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197