Red Hat Security Advisory

RHSA-2023:5952

Red Hat OpenShift Service Mesh for 2.4.4 security update

Released 2023-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

RHOSSM 2.4 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +6

TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8

LOW 39

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03796 Published 2023-10-11 Partial fix · 1.20.10, 1.21.3 +1 CWE-770

TI-2023-11287 CVE-2023-26054 · GHSA-gc89-7gcr-jxqc

LOW 31

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01026 Published 2023-03-06 Fixed in 0.11.4 CWE-200

TI-2021-12427 CVE-2021-32760 · GHSA-c72p-9xmj-rx3w

LOW 31

containerd is a container runtime.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01595 Published 2021-07-19 Partial fix · 1.4.8, 1.5.4 CWE-668