This Red Hat security advisory addresses multiple vulnerabilities in service-interconnect RHEL 9 container images. The update includes fixes for six CVEs affecting components such as curl (memory leak in HTTP/2 push headers), glib2 (signal subscription vulnerabilities), krb5 (GSS message token handling), pypa/setuptools (remote code execution via package_index module), and cpython (email header injection). The advisory recommends upgrading to updated container images containing backported patches and rebuilding dependent container images. The advisory does not provide a CVSS score but classifies the overall severity as low. No exploits in the wild are known. Users should ensure all prior errata are applied before updating. The vendor manages remediation through updated container images available in the Red Hat Container Catalog.

The vulnerabilities fixed by this advisory include memory leaks, signal subscription issues, improper handling of GSS message tokens, potential remote code execution, and email header injection. While these issues could affect the security and stability of the service-interconnect container images, Red Hat has rated the overall severity as low. There are no known active exploits in the wild at this time. The impact is mitigated by upgrading to the patched container images.

Red Hat has released updated service-interconnect RHEL 9 container images containing backported security patches. Users should upgrade to these updated images and rebuild all container images that depend on them. Before applying this update, ensure all previously released errata relevant to your system are applied. The updated images are available in the Red Hat Container Catalog. No additional mitigation steps are indicated by the vendor advisory.