RHSA-2026:49687: Kiali 2.4.21 for Red Hat OpenShift Service Mesh 3.0
Kiali 2.4.21 for Red Hat OpenShift Service Mesh 3.0
Other sources
Kiali 2.4.21, for Red Hat OpenShift Service Mesh 3.0, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-59873 openshift-service-mesh/kiali-ossmc-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14901) CVE-2026-59873 openshift-service-mesh/kiali-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14903) CVE-2026-59874 openshift-service-mesh/kiali-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14915) CVE-2026-59874 openshift-service-mesh/kiali-ossmc-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14916) CVE-2026-59869 openshift-service-mesh/kiali-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14922) CVE-2026-59869 openshift-service-mesh/kiali-ossmc-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14901 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14903 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14915 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14916 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14922 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.4.21Patch OSSM-14927
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49687?
The severity of RHSA-2026:49687 is high, rated at 7.
How do I fix RHSA-2026:49687?
To fix RHSA-2026:49687, you should update Kiali to version 2.4.21 for Red Hat OpenShift Service Mesh 3.0.
What type of vulnerabilities does RHSA-2026:49687 address?
RHSA-2026:49687 addresses a security fix relating to vulnerabilities within Kiali for Red Hat OpenShift Service Mesh.
Is RHSA-2026:49687 applicable to my Red Hat OpenShift Service Mesh installation?
RHSA-2026:49687 applies to installations of Red Hat OpenShift Service Mesh 3.0 that use Kiali.
What is Kiali and its purpose in RHSA-2026:49687?
Kiali provides observability for the service mesh, offering visual representation of the mesh topology and metrics.