RHSA-2023:5952: Important: Red Hat OpenShift Service Mesh for 2.4.4 security update
Important: Red Hat OpenShift Service Mesh for 2.4.4 security update
Other sources
Red Hat OpenShift Service Mesh is the Red Hat distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.Security Fix(es): golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325) containerd: pulling and extracting crafted container image may result in Unix file permission changes (CVE-2021-32760) buildkit: Data disclosure in provenance attestation describing a build (CVE-2023-26054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:5952?
The severity of RHSA-2023:5952 is high.
What is the affected software for RHSA-2023:5952?
The affected software for RHSA-2023:5952 is Red Hat OpenShift Service Mesh for ARM 64.
How can I fix RHSA-2023:5952?
To fix RHSA-2023:5952, apply the Red Hat OpenShift Service Mesh for 2.4.4 security update.
Where can I find more information about RHSA-2023:5952?
You can find more information about RHSA-2023:5952 on the Red Hat Customer Portal, Bugzilla, and the Red Hat Errata website.
Are there any known references for RHSA-2023:5952?
Yes, there are references available for RHSA-2023:5952. You can find them on the Red Hat Customer Portal and Bugzilla.