Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.10 security update
An update is now available for Red Hat OpenShift Service Mesh 2.0.10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29225US | high7.5 | — | ||
Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in th… | ||||
| CVE-2022-29224US | medium5.9 | — | ||
Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2022:5003self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 2088737external
- 2088738external
- OSSM-1613external
- Canonical URLself
remediations (78)
- Fixedservicemesh-proxy-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Fixedservicemesh-proxy-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:5003 - Workaroundservicemesh-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-cni-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-istioctl-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixc-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-mixs-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-operator-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-agent-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-pilot-discovery-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.src as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.src as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-prometheus-0:2.14.0-17.el8.1.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.s390x as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.src as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Disable gRPC health checking and/or replace it with a different health checking type.
- Workaroundservicemesh-proxy-0:2.0.10-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
This can be mitigated by disabling decompression in Envoy.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan