- Issued:
- 2025-10-16
- Updated:
- 2025-10-16
RHSA-2025:18252 - Security Advisory
Synopsis
Kiali 2.11.4 for Red Hat OpenShift Service Mesh 3.1
Type/Severity
Security Advisory: Moderate
Topic
Kiali 2.11.4 for Red Hat OpenShift Service Mesh 3.1
This update has a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Kiali 2.11.4, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
- kiali-ossmc-rhel9: Axios DoS via lack of data size check (CVE-2025-58754)
- kiali-rhel9: Axios DoS via lack of data size check (CVE-2025-58754)
Solution
See Kiali 2.11.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat
Fixes
(none)amd64
| registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:672ba265f8b4745d4d7cb324ae8f883e732986499bad4a72dee82f37567623f8 |
| registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:73f9e1628ae38b2e4bd7fc442c1aa020e3cf82294b8e6b453514a28d12a47b5b |
| registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:3533af085860bb6db976515d1c6ff241cef08360df235581b53ba54edb6599bc |
| registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1d78d641237380eede6d9ad73ef82b8c5e3125e3ebccccc07f6ee9ff3d65a8e0 |
arm64
| registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:79a363dad1ce95dc081cc3197257f0dec1081d841bb401841c0657542b4f4f48 |
| registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:80240f38a5e19e5be1f0c57a7d7e6a43d560e593cd246517f42bcf58adc139f4 |
| registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:45dcded4e227c5eb3a3f364124b1e88d59fd0b476cb060a9d2bc3cb1f671f21c |
ppc64le
| registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:45daaf2c74a6e239416e0161ea77d6262f5dc67cfbb4bc7cde48b0a51f911501 |
| registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:3c3e16987cf1c0180c92e5a518dfaf06002f781209b61293a57ebafcc3100395 |
| registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:c60e70e509bc1beea58d8fb31af315c0114adbe0b0db5f167a894abf6459a7d0 |
s390x
| registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:22c837daffe03e76ca74c79d876aa0b4b638e8e5d94fe809a62642c2e322b192 |
| registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:5e0cfabeb7ec8a599d1ee96dac8202d2b683a315cb320d8648e4f76cb53abe0d |
| registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:10c0ed3900fe219c33c017e9e556d76fd9d3349f3ec1d4d2858786a29ff48ba7 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
