rhsa-2025:15358
Vulnerability from csaf_redhat
Published
2025-09-04 16:29
Modified
2025-11-07 10:53
Summary
Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images

Notes

Topic
Updated RHEL-8 based Middleware Containers container images are now available
Details
The RHEL-8 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2025:14560 (see References) Users of RHEL-8 based Middleware Containers container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images. You can find images updated by this advisory in Red Hat Container Catalog (see References).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.



{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_informational_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated RHEL-8 based Middleware Containers container images are now available",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The RHEL-8 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2025:14560 (see References)\n\nUsers of RHEL-8 based Middleware Containers container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.\n\nYou can find images updated by this advisory in Red Hat Container Catalog (see References).",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:15358",
        "url": "https://access.redhat.com/errata/RHSA-2025:15358"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14560",
        "url": "https://access.redhat.com/errata/RHSA-2025:14560"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/containers",
        "url": "https://access.redhat.com/containers"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "external",
        "summary": "2372512",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372512"
      },
      {
        "category": "external",
        "summary": "2384043",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2384043"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15358.json"
      }
    ],
    "title": "Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images",
    "tracking": {
      "current_release_date": "2025-11-07T10:53:51+00:00",
      "generator": {
        "date": "2025-11-07T10:53:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.11"
        }
      },
      "id": "RHSA-2025:15358",
      "initial_release_date": "2025-09-04T16:29:43+00:00",
      "revision_history": [
        {
          "date": "2025-09-04T16:29:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-04T16:29:43+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-07T10:53:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Middleware Containers for OpenShift",
                "product": {
                  "name": "Middleware Containers for OpenShift",
                  "product_id": "8Base-RHOSE-Middleware",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhosemc:1.0::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64",
                  "product_id": "rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-businesscentral-monitoring-rhel8\u0026tag=7.13.5-4.1756174620"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64",
                  "product_id": "rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-businesscentral-rhel8\u0026tag=7.13.5-4.1756174619"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64",
                  "product_id": "rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-controller-rhel8\u0026tag=7.13.5-4.1756174619"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64",
                  "product_id": "rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-dashbuilder-rhel8\u0026tag=7.13.5-3.1756174623"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64",
                  "product_id": "rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-kieserver-rhel8\u0026tag=7.13.5-4.1756174618"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64",
                  "product_id": "rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-process-migration-rhel8\u0026tag=7.13.5-4.1756174622"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64",
                  "product_id": "rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-rhel8-operator\u0026tag=7.13.5-2.1755681370"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64",
                  "product_id": "rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-smartrouter-rhel8\u0026tag=7.13.5-4.1756174617"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64",
                "product": {
                  "name": "rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64",
                  "product_id": "rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b?arch=amd64\u0026repository_url=registry.redhat.io/rhpam-7/rhpam-operator-bundle\u0026tag=7.13.5-30"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64"
        },
        "product_reference": "rhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:9acdd10682c265af51edd12463bc009eefc0561b45c4099428512c8ec533b77a_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64"
        },
        "product_reference": "rhpam-7/rhpam-businesscentral-rhel8@sha256:d7111417f6f8e251527371ef6238176cab7b0d309fb7aa9bd7b3bb049218d313_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64"
        },
        "product_reference": "rhpam-7/rhpam-controller-rhel8@sha256:ea89634df7ccf18a34a521c8b6de688daba1aef97dac10c83b935550dc7bed58_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64"
        },
        "product_reference": "rhpam-7/rhpam-dashbuilder-rhel8@sha256:bd5176a7eb1f1368b55abc62158ddffda3a0112f682e72c16a7ac78e8fabb221_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64"
        },
        "product_reference": "rhpam-7/rhpam-kieserver-rhel8@sha256:5818f5a003695965d70f61e592cbfb088032398076b2a744c2828054290742b9_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64"
        },
        "product_reference": "rhpam-7/rhpam-operator-bundle@sha256:46e7d899d64ea8cbfc35221d05535db1023c41c1d3a7c580cb03e7e7d769144b_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64"
        },
        "product_reference": "rhpam-7/rhpam-process-migration-rhel8@sha256:39cb426fe5fc7d1c22906414e4be53acd44dcc64eaf415fd55dee783e78a6e09_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64"
        },
        "product_reference": "rhpam-7/rhpam-rhel8-operator@sha256:0f34ade720cce8d55d1a1c1cf2f6b88aa49082466fce208e3cfd1c4d97c80809_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64 as a component of Middleware Containers for OpenShift",
          "product_id": "8Base-RHOSE-Middleware:rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64"
        },
        "product_reference": "rhpam-7/rhpam-smartrouter-rhel8@sha256:5c0fbf8194660aca1339004ab18f19b8dc68ca369198a6deb282248b326b07f1_amd64",
        "relates_to_product_reference": "8Base-RHOSE-Middleware"
      }
    ]
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…