RHSA-2024:10135LowCVSS 8.8

Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.4 LTS

Published
November 21, 2024
Last Modified
October 31, 2026

🔗 CVE IDs covered (10)

CVE-2024-2398 →CVE-2024-6119 →CVE-2024-6345 →CVE-2024-37370 →CVE-2024-45490 →CVE-2024-45492 →CVE-2024-6923 →CVE-2024-34397 →CVE-2024-37371 →CVE-2024-45491 →

📋 Description

CVE-2024-2398 — curl: HTTP/2 push headers memory-leak CVE-2024-6119 — openssl: Possible denial of service in X.509 name checks CVE-2024-6345 — pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools CVE-2024-6923 — cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-34397 — glib2: Signal subscription vulnerabilities CVE-2024-37370 — krb5: GSS message token handling CVE-2024-37371 — krb5: GSS message token handling CVE-2024-45490 — libexpat: Negative Length Parsing Vulnerability in libexpat CVE-2024-45491 — libexpat: Integer Overflow or Wraparound CVE-2024-45492 — libexpat: integer overflow

🎯 Affected products7

  • 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-config-sync-rhel9@sha256:51c106e22bc98c6678dafc2f42e387f6e6158e686436e6f89747703dd9c1bbbc_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-flow-collector-rhel9@sha256:58ec0e5cb8a9544153410867797e40055928dbd589e652e02bf4cddff083f5f6_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-operator-bundle@sha256:32c03556f3eb7f87c0624b105e8d9aac7dcfaea71adf16e4e9825586829880c1_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-router-rhel9@sha256:958ec2e1c85c49252d7b49a7b0073a0e73dffac31e46bad2b0a788114cb13c74_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-service-controller-rhel9@sha256:34ce86c11588f0c7b2ba40ff988a8b6ac7ae6d29182e94d3a65e5756c68578f8_amd64 as a component of 9Base-Service-Interconnect-1.4
  • service-interconnect/skupper-site-controller-rhel9@sha256:cce081bb2d5ae131770dfd095c2e8ad2fcc616d9b3fc487f9252c8f721f1b2ba_amd64 as a component of 9Base-Service-Interconnect-1.4

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)