Red Hat Security Advisory

RHSA-2025:8298

Red Hat OpenShift Service Mesh 3.0.2

Released 2025-05-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395