Stay Secure with the Latest Linux Advisories

security advisorysecurity impactimportant update

Red Hat OpenShift: 2.0.4 Advisory RHSA-2021-1544 Important Security Impact

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenShift Service Mesh 2.0.4 security update Advisory ID: RHSA-2021:1544-01 Product: Red Hat OpenShift Service Mesh Advisory URL: https://access.redhat.com/errata/RHSA-2021:1544 Issue date: 2021-05-11 CVE Names: CVE-2021-3495 ==================================================================== 1. Summary: An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. Security Fix(es): * kiali/kiali-operator: can deploy specified image to any namespace (CVE-2021-3495) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 1947361 - CVE-2021-3495 kiali/kiali-operator: can deploy specified image to any namespace 5.References: https://access.redhat.com/security/cve/CVE-2021-3495 https://access.redhat.com/security/updates/classification#important 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYJsWltzjgjWX9erEAQisCQ//WRRa5pa3Fo3scw5X1CFEBrlANCrjzI3Z 5in8b/Qx/8uEtiQYCARRCNxEsN3TsYt4ZOJca3bHuWWPdkI0NNf0/fTVIBky1D80 3HOiheI4Z0BC9OUI8zegB9NgPlj26Y+FeILO5XdUD9EUp3/2g07i4hhrqqYQOJic UqSXaT7pzLP499WkwGKArp9A+6dPpXz+eXFZ8J1w0snSJ1DOQRH6F0SSWrGXvpVv xtxZ29gF9TTfp8Kp89zHhxA+pTVHP9R/9Jt00Hl6Xeg+sVNmJX9YXxKpnYTEvpmk grtcqGBr9mvFb724A0zISYbus9a7WslQttVdcCvwaOWlwW0oL+0xLI+UnsKhKHWh WK1taAidCEJi54A72+AKNHbhvGC6GEBpKEvPQes/6o3rEEl/XGTosQn5TOLI7AJd 4KRg2AlPYT16Z71jXDEyfNUF3P7RueI+KtqxcdKVpZxN+kflGheGoElsaXd2t1Sl 1S7AuPiMX09M0JboAdZTzGl56854npfrZVW3C7wUc35zjzE/q6PJJ78vdHARUFES w8xvkTOpeH+ZHW+wltCXgDV7Lt2nr8fHH6lW87wEYAENcYzVlKs5lt+YMEVclvw6 22nRYjaG2XkOinMRujLfd4sYBbyQwyWNj98kdJ3U10BCM+NawHxWqXupAjMiOJuy UDewTgiYMgY=zi76 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . The recent update of Red Hat OpenShift Service Mesh 2.0.4 resolves a critical security vulnerability. Discover further details regarding the remedy.. Red Hat OpenShift Service Mesh,kiali operator update,Red Hat update,container security. . Severity: Important. LinuxSecurity.com Team

May 11, 2021 •Important Red Hat