Issued:
2025-06-24
Updated:
2025-06-24

RHSA-2025:9541 - Important: Submariner 0.17.6 bug fixes and container updates

Synopsis

Important: Submariner 0.17.6 bug fixes and container updates

Type/Severity

Security Advisory Important

Topic

Submariner 0.17.6 packages fix bugs and adds enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.

Description

Submariner 0.17.6 enables direct networking between pods and services on different Kubernetes clusters that are on-premises or in the cloud.

This advisory contains bug fixes and enhancements to the Submariner container images.

Security fixes:

  • golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
  • golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

Affected Products

ProductVersionArch
Red Hat Advanced Cluster Management for Kubernetes2x86_64

Fixes

CVEs

References

Additional information