RHSA-2026:11688HighCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.15

Published
April 29, 2026
Last Modified
August 14, 2026

🔗 CVE IDs covered (5)

CVE-2026-25679 →CVE-2026-27143 →CVE-2026-27144 →CVE-2026-32280 →CVE-2026-34986 →

📋 Description

CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-27143 — golang: cmd/compile: possible memory corruption after bound check elimination CVE-2026-27144 — golang: cmd/compile: no-op interface conversion bypasses overlap checking CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-34986 — github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

🎯 Affected products22

  • Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:04b1ac41f2359886a4bd8c7103a45cc60397b69b7a79c18aa6124ebe09b2d9a4_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:127eeb73112e219027af60fc73f78b313ca4660b3a7c472bae711d7278d886a7_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:a9dbef80d591e7bbb95681fb19183858e309a53463ee83fd6da288261b531590_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:c8f38b059dd071540e71a5d8ca7ccdd75650dd9d6b61163920bea03d8fede00d_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:55eff6f4571c6f9ac79071da166328cff43afe999364cf3a1b6428896ea65f01_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:8bb141f2442e991b11c3ae22a771f5f4b4c8de2f061430bcc66dc0d9fb0eb680_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:f407418a60bc916c97e83d02bb20686f830cc1669fedb9dd7da2e5aed1059567_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel8@sha256:fb4c5046d41ceb03b06a1cfeb6cd1e23800291fdfa63bc9f4d83a6d66319d815_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-operator-bundle@sha256:eb939796d4c218cf2dcb1f74452a4f1928076aed130b84a2cd7da07ffc24a929_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-rhel8-operator@sha256:9a557accbe2e00e916ee963375318b32904a7977db79c12c323de12fdfde0fc9_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-rhel8-operator@sha256:a7f0ac59b0f01e16a648e84611752884974f192ea6b59c36edc883662bee0145_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-rhel8-operator@sha256:d05d3c0323f54ba53fae5cd72ba80b352ebf4dc4140664515f3e004cada71aba_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/istio-rhel8-operator@sha256:fa2ddb85a7778159e908f8985dd249c1ade12999469c47705ea9ec421d63a865_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:099139a263a6ad38795c1fb9c0441289b630b2fa35925c022c4e75b541736717_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:d7ce936cea6082357f4849eca746af432a4082d73f76146999cbf1bba3961751_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:d9d39f4355dc3467a8d5266516c9d6ef63d452d4e8e7e5f4fb7233f9fcec621c_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:dc39732c6580eab197d18d3cf347ca4996cc3d6901024332ffdb09433a42e14a_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:2627fd45d7d117d3c3ea75cb1dfe8c013b2ae167faefc08053f4b794415f9ab1_amd64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:bdc7508446fb198445811e678f91712f9b1d50c4e709bf65d9760ac8879937c4_s390x as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:db7c7d745d2f18ac440ae62cbaa4dbda49c842253e00a4a8d36e61f843789619_arm64 as a component of Red Hat OpenShift Service Mesh 2.6
  • registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:ed56d6fb026e175877f9be146497802beb0c52bf35b11ebb3e7fce9f969f05f4_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6

✅ Remediation

See Red Hat OpenShift Service Mesh 2.6.15 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/service_mesh/service-mesh-2-x Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, strictly sanitize and enforce bounds checking on any untrusted user input that influences loop counters, iteration limits, or memory indices. If there is no integer overflow or underflow, the out-of-bounds access cannot occur. Workaround: To mitigate this issue, review code that performs memory copies or struct assignments. If data is being passed through an interface (such as 'any' or 'interface{}') just before a move operation, refactor the code to use concrete types or explicit pointers instead.

🔗 References (14)