Red Hat Security Advisory: servicemesh-operator security update
An update for servicemesh-operator is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3586US | critical9.8OT erhöht | — | ||
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on the… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- Behobenservicemesh-operator-0:2.0.5-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Behobenservicemesh-operator-0:2.0.5-3.el8.s390x as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Behobenservicemesh-operator-0:2.0.5-3.el8.src as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Behobenservicemesh-operator-0:2.0.5-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Workaroundservicemesh-operator-0:2.0.5-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.s390x as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.src as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan