Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29492US | high8.3OT high | — | ||
Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker… | ||||
| CVE-2021-31920US | medium6.5OT elevated | — | ||
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could p… | ||||
references
External citations — patches, advisories, analysis.
remediations (31)
- Fixedservicemesh-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-0:2.0.4-1.el8.src as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-istioctl-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-istioctl-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-istioctl-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixc-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixc-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixc-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixs-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixs-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-mixs-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.src as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.src as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-operator-0:2.0.4-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-agent-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-agent-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-agent-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-discovery-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-discovery-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-pilot-discovery-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-proxy-0:2.0.4-1.el8.ppc64le as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-proxy-0:2.0.4-1.el8.s390x as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-proxy-0:2.0.4-1.el8.src as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538 - Fixedservicemesh-proxy-0:2.0.4-1.el8.x86_64 as a component of OpenShift Service Mesh 2.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1538
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan