RedHat: RHSA-2022-5915:01 Moderate: Red Hat Kiali for OpenShift Service
Summary
Red Hat Kiali for OpenShift Service Mesh is Red Hat's distribution of the
Istio service mesh project, tailored for installation into an on-premise
OpenShift Container Platform installation.
This advisory covers containers for the release.
Security Fix(es):
* moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Summary
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
References
https://access.redhat.com/security/cve/CVE-2022-31129 https://access.redhat.com/security/updates/classification/#moderate
Package List
Topic
Red Hat Kiali for OpenShift Service Mesh 2.2 ContainersRed Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Topic
Relevant Releases Architectures
Bugs Fixed
2105075 - CVE-2022-31129 moment: inefficient parsing algorithm resulting in DoS
5. JIRA issues fixed (https://issues.redhat.com/):
OSSM-1821 - Rebuild container images (container and operator)1.48 to pick up base image CVE fixes
