Red Hat Security Advisory

RHSA-2019:4222

Red Hat OpenShift Service Mesh 1.0.3 RPMs security update

Released 2019-12-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

OpenShift Service Mesh 1.0 servicemesh-1.0.3-1.el8, servicemesh-citadel-1.0.3-1.el8, servicemesh-cni-1.0.3-1.el8 +12
Red Hat OpenShift Service Mesh 1.0 kiali-v1.0.8.redhat1-1.el7

TI-2019-13539 CVE-2019-18802 · GHSA-fx83-72pw-c56f

MEDIUM 47

An issue was discovered in Envoy 1.12.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02457 Published 2019-12-13 Fixed

TI-2019-13538 CVE-2019-18801 · GHSA-288h-hv2q-fwrv

MEDIUM 47

An issue was discovered in Envoy 1.12.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02502 Published 2019-12-13 Fixed CWE-787

TI-2019-13574 CVE-2019-18838 · GHSA-m3j5-qf4q-m73w

LOW 37

An issue was discovered in Envoy 1.12.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02142 Published 2019-12-13 Fixed CWE-476