This advisory concerns Red Hat Service Interconnect 1.5 container images for RHEL 9, which have been updated to include backported patches for several security vulnerabilities and bugs. The update addresses multiple CVEs, including CVE-2024-2398 and others, covering issues such as forgery attacks in freeradius and denial of service in libexpat. Users are recommended to upgrade to the updated images and rebuild any container images that depend on them. The advisory does not provide a CVSS score but classifies the severity as low.

The vulnerabilities addressed by this update are rated as low severity by Red Hat. They include issues such as forgery attacks and denial of service conditions, which could potentially affect the integrity and availability of the service-interconnect container images. No known exploits in the wild have been reported. The impact is limited to users running the affected container images who do not apply the updates.

Red Hat has provided updated container images containing backported security patches. Users should upgrade to these updated service-interconnect 1.5 RHEL 9 container images and rebuild all dependent container images. Before applying this update, users should ensure all previously released relevant errata have been applied. Detailed update instructions are available in the Red Hat knowledge base. No additional mitigation steps are indicated by the vendor.