RedHat: RHSA-2021-1544:01 Important: Red Hat OpenShift Service Mesh...

Advisories

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Important: Red Hat OpenShift Service Mesh 2.0.4 security update
Advisory ID:       RHSA-2021:1544-01
Product:           Red Hat OpenShift Service Mesh
Advisory URL:      https://access.redhat.com/errata/RHSA-2021:1544
Issue date:        2021-05-11
CVE Names:         CVE-2021-3495 
=====================================================================

1. Summary:

An update for openshift-istio-kiali-rhel8-operator-container is now
available for OpenShift Service Mesh 2.0.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Description:

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio
service mesh project, tailored for installation into an on-premise
OpenShift Container Platform installation.

Security Fix(es):

* kiali/kiali-operator: can deploy specified image to any namespace
(CVE-2021-3495)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

3. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

4. Bugs fixed (https://bugzilla.redhat.com/):

1947361 - CVE-2021-3495 kiali/kiali-operator: can deploy specified image to any namespace

5. References:

https://access.redhat.com/security/cve/CVE-2021-3495
https://access.redhat.com/security/updates/classification/#important

6. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2021 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIVAwUBYJsWltzjgjWX9erEAQisCQ//WRRa5pa3Fo3scw5X1CFEBrlANCrjzI3Z
5in8b/Qx/8uEtiQYCARRCNxEsN3TsYt4ZOJca3bHuWWPdkI0NNf0/fTVIBky1D80
3HOiheI4Z0BC9OUI8zegB9NgPlj26Y+FeILO5XdUD9EUp3/2g07i4hhrqqYQOJic
UqSXaT7pzLP499WkwGKArp9A+6dPpXz+eXFZ8J1w0snSJ1DOQRH6F0SSWrGXvpVv
xtxZ29gF9TTfp8Kp89zHhxA+pTVHP9R/9Jt00Hl6Xeg+sVNmJX9YXxKpnYTEvpmk
grtcqGBr9mvFb724A0zISYbus9a7WslQttVdcCvwaOWlwW0oL+0xLI+UnsKhKHWh
WK1taAidCEJi54A72+AKNHbhvGC6GEBpKEvPQes/6o3rEEl/XGTosQn5TOLI7AJd
4KRg2AlPYT16Z71jXDEyfNUF3P7RueI+KtqxcdKVpZxN+kflGheGoElsaXd2t1Sl
1S7AuPiMX09M0JboAdZTzGl56854npfrZVW3C7wUc35zjzE/q6PJJ78vdHARUFES
w8xvkTOpeH+ZHW+wltCXgDV7Lt2nr8fHH6lW87wEYAENcYzVlKs5lt+YMEVclvw6
22nRYjaG2XkOinMRujLfd4sYBbyQwyWNj98kdJ3U10BCM+NawHxWqXupAjMiOJuy
UDewTgiYMgY=
=zi76
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2021-1544:01 Important: Red Hat OpenShift Service Mesh 2.0.4

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0

Summary

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.
Security Fix(es):
* kiali/kiali-operator: can deploy specified image to any namespace (CVE-2021-3495)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changesdescribed in this advisory, refer to:https://access.redhat.com/articles/11258

References

https://access.redhat.com/security/cve/CVE-2021-3495 https://access.redhat.com/security/updates/classification/#important

Package List

Severity
Advisory ID: RHSA-2021:1544-01
Product: Red Hat OpenShift Service Mesh
Advisory URL: https://access.redhat.com/errata/RHSA-2021:1544
Issued Date: : 2021-05-11
CVE Names: CVE-2021-3495

Topic

An update for openshift-istio-kiali-rhel8-operator-container is nowavailable for OpenShift Service Mesh 2.0.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Relevant Releases Architectures

Bugs Fixed

1947361 - CVE-2021-3495 kiali/kiali-operator: can deploy specified image to any namespace

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.