RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4.1

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade Red Hat OpenShift Service Mesh (OSSM) to a version that resolves this vulnerability.

   Fixed in 3.4.1
2. Upgrade

   Upgrade openshift-service-mesh/istio-proxyv2-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14933
3. Upgrade

   Upgrade openshift-service-mesh/istio-pilot-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14933
4. Upgrade

   Upgrade openshift-service-mesh/istio-cni-rhel9 to a version that resolves this vulnerability.

   Patch OSSM-14933
5. Upgrade

   Upgrade openshift-service-mesh/istio-rhel9-operator to a version that resolves this vulnerability.

   Patch OSSM-14933
6. Compensating control

   If you are affected by OSSM-14646 (istiod-default-validator points to a non-existent istiod Service after an OSSM 3.3.4 upgrade when using a non-default Istio name with the default revision tag), remediate by applying the OSSM 3.4.1 fix (OSSM-14646).

Event History