First published: Wed Aug 31 2022(Updated: )
Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.<br>This advisory covers the RPM packages for the release.<br>Security Fix(es):<br><li> moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)</li> <li> Moment.js: Path traversal in moment.locale (CVE-2022-24785)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/servicemesh | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-cni | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-operator | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-prometheus | <2.14.0-18.el8.1 | 2.14.0-18.el8.1 |
redhat/servicemesh-proxy | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-cni | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-istioctl | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixc | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixs | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-operator | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-agent | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-discovery | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-prometheus | <2.14.0-18.el8.1 | 2.14.0-18.el8.1 |
redhat/servicemesh-proxy | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-cni | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-istioctl | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixc | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixs | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-operator | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-agent | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-discovery | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-prometheus | <2.14.0-18.el8.1 | 2.14.0-18.el8.1 |
redhat/servicemesh-proxy | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-istioctl | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixc | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-mixs | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-agent | <2.0.11-1.el8 | 2.0.11-1.el8 |
redhat/servicemesh-pilot-discovery | <2.0.11-1.el8 | 2.0.11-1.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.