Red Hat Product Errata RHSA-2021:2061 - Security Advisory
Issued:
2021-05-20
Updated:
2021-05-20

RHSA-2021:2061 - Security Advisory

Synopsis

Important: Red Hat OpenShift Service Mesh 2.0.5 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for servicemesh is now available for OpenShift Service Mesh 2.0.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.

Security Fix(es):

  • istio/istio: authorization bypass when using AUTO_PASSTHROUGH (CVE-2021-31921)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

The OpenShift Service Mesh release notes provide information on the features and known issues:

https://docs.openshift.com/container-platform/4.7/service_mesh/v2x/servicemesh-release-notes.html

Affected Products

  • Red Hat OpenShift Service Mesh 2.0 for RHEL 8 x86_64
  • Red Hat OpenShift Service Mesh for Power 2.0 for RHEL 8 ppc64le
  • Red Hat OpenShift Service Mesh for IBM Z 2.0 for RHEL 8 s390x

Fixes

  • BZ - 1955396 - CVE-2021-31921 istio/istio: authorization bypass when using AUTO_PASSTHROUGH

Red Hat OpenShift Service Mesh 2.0 for RHEL 8

SRPM
servicemesh-2.0.5-3.el8.src.rpm SHA-256: 6679e462f92fa510811897b2528d9349848031fa38a53b4d39fe7121416c057d
x86_64
servicemesh-2.0.5-3.el8.x86_64.rpm SHA-256: 4f54c8b9a04dd98dbaa300563f546d42bb462ac2c5303ed45eb007fc18d088fe
servicemesh-istioctl-2.0.5-3.el8.x86_64.rpm SHA-256: c9af38fd5138f6b68e52003854d0c9b61f4cf907862a06995efb1001347dde37
servicemesh-mixc-2.0.5-3.el8.x86_64.rpm SHA-256: bfd039729e287bb1a7fb4cc4484a5b1dca94107bf4eec962356866fd8c8dd45d
servicemesh-mixs-2.0.5-3.el8.x86_64.rpm SHA-256: a94916a2d21056244b6d134fb82a9c429e734574a97815307a660f3a8fce4216
servicemesh-pilot-agent-2.0.5-3.el8.x86_64.rpm SHA-256: 1601815632211ede231efdbc5793c46bf19b092f86a84d394cdf7a9103f0f163
servicemesh-pilot-discovery-2.0.5-3.el8.x86_64.rpm SHA-256: 0507632cec896b648e711e38249ccd34cdfc9621e4a9655370e6aaabea5af2a2

Red Hat OpenShift Service Mesh for Power 2.0 for RHEL 8

SRPM
servicemesh-2.0.5-3.el8.src.rpm SHA-256: 6679e462f92fa510811897b2528d9349848031fa38a53b4d39fe7121416c057d
ppc64le
servicemesh-2.0.5-3.el8.ppc64le.rpm SHA-256: 782d326b6f2820c9ebdd31b2543fc65d8f0250033ffcc248dc839626fb8876b2
servicemesh-istioctl-2.0.5-3.el8.ppc64le.rpm SHA-256: 64387bfc28225993b0b4cb76007c60a2bcc487904f0f4fb7f34346e443f4994b
servicemesh-mixc-2.0.5-3.el8.ppc64le.rpm SHA-256: 2ce2b16d76c808c1fd534fea4da8f3b618039d14439208f4c20db0a7a29ad9eb
servicemesh-mixs-2.0.5-3.el8.ppc64le.rpm SHA-256: 39fcfb052fa839dd96de32b3aafd65611511ebad1842f864f57db65ee6c71165
servicemesh-pilot-agent-2.0.5-3.el8.ppc64le.rpm SHA-256: ec61ec82f436e9e706332f40ec070c0df0df32fc18eee8648ff4d91309abcbab
servicemesh-pilot-discovery-2.0.5-3.el8.ppc64le.rpm SHA-256: 18ac4f50cbf2e6598aa004186fc5e2b198001ef6d461f119011f62db5c178919

Red Hat OpenShift Service Mesh for IBM Z 2.0 for RHEL 8

SRPM
servicemesh-2.0.5-3.el8.src.rpm SHA-256: 6679e462f92fa510811897b2528d9349848031fa38a53b4d39fe7121416c057d
s390x
servicemesh-2.0.5-3.el8.s390x.rpm SHA-256: bea2eed2a70ade19a9231c6d16fa28702c99bc2602fb0f8cfee171f325cabdf1
servicemesh-istioctl-2.0.5-3.el8.s390x.rpm SHA-256: f78ee9e9683c20759b4e3b448a38eea22feb0a047971b277ea25730fea130ef2
servicemesh-mixc-2.0.5-3.el8.s390x.rpm SHA-256: 9d63dcc137da4168800d4f15ade814190efb3d183f939b4f448ed246d10f5401
servicemesh-mixs-2.0.5-3.el8.s390x.rpm SHA-256: 969a18e5789b9e658faa594416f21cadcd430f7141d7df8ca87eeedabe0d0010
servicemesh-pilot-agent-2.0.5-3.el8.s390x.rpm SHA-256: c0b275606337729e84fde1be3b2680966887bf639494a76b15c9b8c9554a14ad
servicemesh-pilot-discovery-2.0.5-3.el8.s390x.rpm SHA-256: fab7bdad176797be9dc75a76aac04369fdcdc4e16454d366cfaeda634bdb52e2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.