RHSA-2026:49689: Kiali 2.11.15 for Red Hat OpenShift Service Mesh 3.1

Published Aug 3, 2026

Updated

Kiali 2.11.15 for Red Hat OpenShift Service Mesh 3.1

Other sources

Kiali 2.11.15, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-59873 openshift-service-mesh/kiali-ossmc-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14904) CVE-2026-59873 openshift-service-mesh/kiali-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14906) CVE-2026-59874 openshift-service-mesh/kiali-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14910) CVE-2026-59874 openshift-service-mesh/kiali-ossmc-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14914) CVE-2026-59869 openshift-service-mesh/kiali-ossmc-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14923) CVE-2026-59869 openshift-service-mesh/kiali-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14926) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat OpenShift Service Mesh

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openshift-service-mesh/kiali-ossmc-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14904
Upgrade
Upgrade openshift-service-mesh/kiali-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14906
Upgrade
Upgrade openshift-service-mesh/kiali-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14910
Upgrade
Upgrade openshift-service-mesh/kiali-ossmc-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14914
Upgrade
Upgrade openshift-service-mesh/kiali-ossmc-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14923
Upgrade
Upgrade openshift-service-mesh/kiali-rhel9 to a version that resolves this vulnerability.
Fixed in 2.11.15Patch OSSM-14926

Event History

Aug 3, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·01:51 PM

Data Sourced

via Red Hat·01:51 PM

Severity

Frequently Asked Questions

What is the severity of RHSA-2026:49689?

The severity of RHSA-2026:49689 is classified as high with a score of 7.

What security vulnerabilities are addressed in RHSA-2026:49689?

RHSA-2026:49689 addresses security vulnerabilities including CVE-202... which affects Kiali 2.11.15.

How do I fix RHSA-2026:49689?

To fix RHSA-2026:49689, update Kiali to version 2.11.15 for Red Hat OpenShift Service Mesh 3.1.

What software is affected by RHSA-2026:49689?

RHSA-2026:49689 affects Kiali 2.11.15 within the Red Hat OpenShift Service Mesh 3.1.

Is RHSA-2026:49689 critical to my application security?

Yes, RHSA-2026:49689 is considered high severity and should be addressed to maintain application security.