This advisory pertains to Red Hat Service Interconnect 1.4 LTS container images for RHEL 9. The updated container images contain backported patches that fix multiple security vulnerabilities and bugs, including issues tracked under CVE-2024-2398 and nine additional CVEs. The vulnerabilities involve various weaknesses such as forgery attacks and denial-of-service conditions. Users are recommended to upgrade to the updated images and rebuild dependent containers. The advisory references Red Hat errata RHSA-2024:10135 and includes fixes for issues reported in related bugzilla entries.

The vulnerabilities addressed by this update are rated as low severity by Red Hat. They include forgery attacks, denial-of-service, and other security issues affecting the service-interconnect container images. Exploitation could potentially lead to limited impact on confidentiality, integrity, or availability within affected container environments. There are no known exploits in the wild at this time.

Users should upgrade to the updated service-interconnect 1.4 LTS container images for RHEL 9 as provided by Red Hat. Additionally, all container images depending on these base images should be rebuilt to incorporate the fixes. Before applying this update, ensure all previously released relevant errata have been applied. Detailed update instructions are available in the Red Hat knowledge base article https://access.redhat.com/articles/11258. No other specific mitigations are indicated by the vendor.