Red Hat Security Advisory

RHSA-2020:3425

Red Hat OpenShift Service Mesh 1.1 security update

Released 2020-08-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Service Mesh 1.1 servicemesh-1.1.7-1.el8, servicemesh-citadel-1.1.7-1.el8, servicemesh-galley-1.1.7-1.el8 +6

Fixes 1 record

TI-2020-12849 CVE-2020-16844 · GHSA-82mm-ffjr-h86c

In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an…

LOW 32

In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01095 Published 2020-10-01 Fixed in 1.5.9, 1.6.8 CWE-284