RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3.6

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade Red Hat OpenShift Service Mesh to a version that resolves this vulnerability.

   Fixed in 3.3.6
2. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14633
3. Upgrade

   Upgrade openshift-service-mesh/istio-pilot-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14633
4. Upgrade

   Upgrade openshift-service-mesh/istio-cni-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14633
5. Upgrade

   Upgrade openshift-service-mesh/istio-rhel9-operator to a version that resolves this vulnerability.

   Patch OSSM-14633
6. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14882
7. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14883
8. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14884
9. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14885
10. Upgrade

    Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

    Patch OSSM-14886
11. Upgrade

    Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

    Patch OSSM-14887
12. Configuration

    After upgrading to Red Hat OpenShift Service Mesh 3.3.6, ensure Istiod-default-validator is corrected so it does not point to a non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646).

    Istiod-default-validator points-to revision/service reference = non-existent istiod Service (fixed)

Event History