RHSA-2025:1875: Moderate: Red Hat OpenShift Service Mesh Containers for 2.5.9

Published Feb 26, 2025

Updated

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.Security Fix(es): kiali-ossmc-container: Mutation XSS in DOMPurify Due to Improper Template Literal Handling (CVE-2025-26791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Service Mesh

Remediation

Event History

Feb 26, 2025

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2025:1875?

The severity of RHSA-2025:1875 is classified as moderate.

What issue does RHSA-2025:1875 address?

RHSA-2025:1875 addresses a Mutation XSS vulnerability in DOMPurify within the kiali-ossmc container.

How do I fix RHSA-2025:1875?

To fix RHSA-2025:1875, update the kiali-ossmc container to the patched version provided by Red Hat.

Which products are affected by RHSA-2025:1875?

RHSA-2025:1875 affects the Red Hat OpenShift Service Mesh version 2.5.9.

Is there any workaround for RHSA-2025:1875?

As of now, there are no recommended workarounds for RHSA-2025:1875; updating is deemed necessary.