RHSA-2026:49681: Kiali 2.17.12 for Red Hat OpenShift Service Mesh 3.2
Kiali 2.17.12 for Red Hat OpenShift Service Mesh 3.2
Other sources
Kiali 2.17.12, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-59873 openshift-service-mesh/kiali-ossmc-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14902) CVE-2026-59873 openshift-service-mesh/kiali-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14907) CVE-2026-59874 openshift-service-mesh/kiali-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14911) CVE-2026-59874 openshift-service-mesh/kiali-ossmc-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14913) CVE-2026-59869 openshift-service-mesh/kiali-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14929) CVE-2026-59869 openshift-service-mesh/kiali-ossmc-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14931) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiali 2.17.12 for Red Hat OpenShift Service Mesh 3.2to a version that resolves this vulnerability.Fixed in 2.17.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14902 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14907 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14911 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14913 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14929 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch OSSM-14931
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49681?
The severity of RHSA-2026:49681 is classified as high with a score of 7.
What security vulnerabilities are addressed in RHSA-2026:49681?
RHSA-2026:49681 addresses specific security fixes including risks associated with CVE identifiers.
How do I fix RHSA-2026:49681?
To fix RHSA-2026:49681, you should update to Kiali 2.17.12 for Red Hat OpenShift Service Mesh 3.2.
What does Kiali 2.17.12 offer for Red Hat OpenShift Service Mesh 3.2 as mentioned in RHSA-2026:49681?
Kiali 2.17.12 provides observability tools including a visual representation of the service mesh topology and metrics.
Why is it important to address RHSA-2026:49681 promptly?
Addressing RHSA-2026:49681 promptly is crucial due to its high severity rating, which indicates a significant risk that could impact the security of your service mesh.