RHSA-2023:4114MediumCVSS 6.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.1 security update

Published
July 17, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-3089 →

📋 Description

CVE-2023-3089 — openshift: OCP & FIPS mode

🎯 Affected products28

  • RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:21d13e5cad4253c6fd3420b448fecc0f7bfce84e4920e622d6a003f31aad4b19_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:441adea2e1e1189e2b0de28cd075d118d86557cf0efaa6bc79dd0c6d6bba6ed2_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:e127660d8c3e68e5a90ce309e62d8d5555af146d1c5d64c3287761aaa3b9b363_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:033fc6a4200b9cc692bc8d37a9b07b93bdc82e69c428c4ae4efc50c4c2ad2474_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:1ddf0a7fa8145d0e80f1943637415d2f582c0fb86b59b592cba2966e20dda215_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:36aa55671704c4ae1c76eec071bdacbc7eea55754cbed0bbcc196c7ecd024baf_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:3e2633dc79218068e954a63d3de673d1c56b6cd343340b4b06b40218a1529329_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:6aa38f7f3608ce31c8f7ebb463b0b86a5d6155bf54cdf1706fb0d6613b7534ea_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:b48b877ab3066f1d16666925d47e684a912b7e2be414e9a46169bb64ef60b793_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:0e68c5cf1ede361a9870ac9d3f4047e98c4c150772345abd393e756f17e2d549_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:2be4c1ed685c5ab96d9924586b2575a1f888ed6508ad719ca13a59a911210118_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:5e69c61fa9358aeaf5e5d5a198abafdcb4d584db1845cf79dac631fa81e15c9f_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8-operator@sha256:600381b61bbcdea53092d5d122c43087e36cca9f70f1c113162a583122e2319d_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8-operator@sha256:8884a50fc13883569cf9eb1128d87c8594df081b9d0a0892fdfaacc6a1444dc8_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8-operator@sha256:987ce64ae79bb71489bdde6eaaac71f90da20f5816b06df9cea4259262939fdd_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:5f5be5d738c8f1754fd33941aa3d9f8bd9fc283ed25cb5ff185dcfefd8d809f2_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:789d14357d17fce1975a974f393315f190eda30977d43c2e7259687d7a0d812b_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:9e48cbb0c47fb2756d6d7ff271e6a4ca45ca775a9bafedda3d4e3f8ce1ff24db_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:3fd50a976db0b4b1a4edc3449e4eb90c69e2e8fc2891c2a44a4e6288a24c171a_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:65914768066942514342d2a5b9abcd85612fe5380b42339f24b716d29ef16145_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:f9bd949bc7eacf757a7ce9ae4942ff61e8e73ad904ac63a064c5f91d3a991e90_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:292e19b8ce24e339ca683c32b0af3f5a064da65fe2d875b5ac589ff40a2477b2_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:2b4f83a0ca1b2eb0e9360de2056fe2d03807988ea45a2e380dad60b10ce6cf14_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:c282a7e3899a14f18b0a28289fd816da2c5f5ff5e8699dceb01f7d4ce3c1ca04_ppc64le as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:13537af70e4ce73dd832884f8e870601997a2f04b9bb8e4f33f6c0778dfbbea5_s390x as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:9e93b00c17c3894061ac428b149f3261d769420c62f65e021bd66a3aa51c331b_amd64 as a component of RHOSSM 2.4 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:c75f062c0d4acb819858986436525d34f4ce22a138dff115cb4febabbb52a52d_ppc64le as a component of RHOSSM 2.4 for RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

🔗 References (7)