RHSA-2025:1053: Important: Red Hat OpenShift Service Mesh Containers for 2.6.5
Important: Red Hat OpenShift Service Mesh Containers for 2.6.5
Other sources
Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.<br>Security Fix(es):<br><li> openshift-istio-proxyv2-rhel9-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)</li> <li> openshift-istio-proxyv2-rhel9-container: HTTP/1: sending overload crashes when the request is reset beforehand in envoy (CVE-2024-53270)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:1053?
The severity of RHSA-2025:1053 is classified as important, indicating a significant security concern that should be addressed promptly.
How do I fix RHSA-2025:1053?
To fix RHSA-2025:1053, update the affected Red Hat OpenShift Service Mesh to the latest patched version.
What products are affected by RHSA-2025:1053?
RHSA-2025:1053 affects various distributions of Red Hat OpenShift Service Mesh, including those for IBM Z, Power, and ARM 64.
What kind of vulnerabilities does RHSA-2025:1053 address?
RHSA-2025:1053 addresses critical vulnerabilities in the openshift-istio-proxy component of Red Hat OpenShift Service Mesh.
Is there a workaround for RHSA-2025:1053?
There are no official workarounds for RHSA-2025:1053; applying the relevant updates is the recommended action.