Red Hat Security Advisory

RHSA-2024:9627

Red Hat OpenShift Service Mesh Containers for 2.6.3

Released 2024-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOSSM 2.6 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +4
RHOSSM 2.6 for RHEL 9 openshift-service-mesh/proxyv2-rhel9

Fixes 1 record

TI-2024-14292 CVE-2024-21536 · GHSA-c7qv-q95q-8v27

Uncontrolled resource consumption in http-proxy-middleware

HIGH 77

Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01034 Published 2024-10-19 Partial fix · 2.0.7, 3.0.3 CWE-400