Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.14 security update
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-29492US | high8.3OT hoch | — | ||
Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker… | ||||
| CVE-2021-31920US | medium6.5OT erhöht | — | ||
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could p… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (32)
- Behobenservicemesh-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-0:1.1.14-1.el8.src as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-citadel-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-citadel-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-citadel-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-galley-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-galley-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-galley-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-istioctl-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-istioctl-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-istioctl-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixc-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixc-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixc-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixs-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixs-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-mixs-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-agent-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-agent-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-agent-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-discovery-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-discovery-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-pilot-discovery-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-proxy-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-proxy-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-proxy-0:1.1.14-1.el8.src as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-proxy-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-sidecar-injector-0:1.1.14-1.el8.ppc64le as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-sidecar-injector-0:1.1.14-1.el8.s390x as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540 - Behobenservicemesh-sidecar-injector-0:1.1.14-1.el8.x86_64 as a component of OpenShift Service Mesh 1.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:1540
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan