Red Hat Security Advisory

RHSA-2024:7724

Red Hat OpenShift Service Mesh Containers for 2.4.11

Released 2024-10-07 · Red Hat rating Important · View on Red Hat →

Fixed in

RHOSSM 2.4 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +4

TI-2024-21842 CVE-2024-32976

HIGH 72

Envoy is a cloud-native, open source edge and service proxy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2024-06-04 Partial fix CWE-835

TI-2024-29382 CVE-2024-43788 · GHSA-4vvj-4cpr-p986

MEDIUM 62

Webpack is a module bundler.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00959 Published 2024-08-27 Partial fix · 5.94.0 CWE-79

TI-2024-21369 CVE-2024-32475

MEDIUM 40

Envoy is a cloud-native, open source edge and service proxy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00679 Published 2024-04-18 Partial fix · 1.30.1, 1.29.4 +2 CWE-253

TI-2024-29394 CVE-2024-43800 · GHSA-cm22-4g7w-348p

LOW 24

serve-static serves static files.

CVSS 3.1MEDIUM 5.0 Network No auth User interaction EPSS 0.00631 Published 2024-09-10 Partial fix · 1.16.0, 2.1.0 CWE-79

TI-2024-29393 CVE-2024-43799 · GHSA-m6fv-jmcg-4jfg

LOW 24

Send is a library for streaming files from the file system as a http response.

CVSS 3.1MEDIUM 5.0 Network No auth User interaction EPSS 0.00541 Published 2024-09-10 Partial fix · 0.19.0 CWE-79