- Issued:
- 2025-12-09
- Updated:
- 2025-12-09
RHSA-2025:22939 - Security Advisory
Synopsis
Red Hat OpenShift Service Mesh 3.0.7
Type/Severity
Security Advisory: Low
Topic
Red Hat OpenShift Service Mesh 3.0.7
Description
Red Hat OpenShift Service Mesh 3.0.7, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Security Fix(es):
- istio-proxyv2-rhel9: AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections (CVE-2025-53643)
Solution
See Red Hat OpenShift Service Mesh 3.0.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0
Fixes
(none)CVEs
amd64
| registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:6cdd4499ffcf0843dc9cf68a15654a995514e3f97418e6aa06bc50271305dcac |
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:8c187578dd4bdf7059a5e295690d37fdfbaad8208f8c81fb74a86a27032b5e9c |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5c13d21b0bc0b9b533a817eb550811d527ac1e175b7f7f2b78b6f2637e9104ea |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d0244df92c03faaf084ab996ad1063dd6495ed4ed07e7001982d2bd50db83c6c |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:592d631e94e81666a8793b228b297d86ed0a3c58b119b99017bf7d6dca92f6a9 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7533adf78e1afe897bfde5823833748ea350d57394b8e4d0152006066263b590 |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:e79c0af0f2b4905b30caf4b2f533f1cfc065049565ac1fcc1dfd7eddf365d88e |
arm64
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:d96ea161cd2c787fcb9d94b30c224e3c52d2b0ac95dd49c242bc39c228351e29 |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:afe805203f8a0e4aff1ae347e884d8abed4603e7dbb59fe72778ba0b9fc3552f |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3e03d9b53f2b118505269dc5d3c18147e2eb945c63748a710e50edb5e4964e01 |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:6398dd15fc6c50f7612f73132d613140b492c7fbb641e7a19be7a33a273f44e5 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:c57edf0eefcfa85a4934f655481a0d7289ccb86dbdc408f38aaa410e29264644 |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:eff2b6e18e2903382746afa978ee0b27b20288d7530fe6d9eba4e2a55391911c |
ppc64le
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bcb0e9879722b46f0c48e544283903ae8c6d2890f069184adec0b1cb74902d60 |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:de0f20981d7f9a810b4a535e682d81dcf142617a7a40c55535077495fc61df76 |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:38feb025fd47d4ce7cea33896284345468c3c30bbc5eb296a71e37bf400e5c8d |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:51f66dd1f76e933cd7903e697e1710b28b2c38b14f58cc2321b1726eccd1bb69 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:1bf06b7702b10b125afb246830ce4251f89108c629e17aadbe6e71fc2808adce |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:e15d2378e58c7139ae1c49e3dcfd4a3df77d7d873158d9ccceb75c7eba6876dc |
s390x
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:de246a21a89ae2962f32f3698fcaead7d7b47ac25190c5f169e63c92ed1c2bc2 |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:7ffedde02d133a1823388b8528ff8c68aa3a0236a324d4d24bb910d3598fb55f |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:69783656f7a801b4d023477c0094d40a548029d90629cee8029d747fe2f7535c |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7ec49fae1484fec44c5c3df538a7210683399921937306fcb33843bc82832c34 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:ab7715847869d9551c05c134610bf2aa94686eb420be1c57395cae80dfb8699d |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:2edc159b9d5520411f19d4688bc73981d969a1d0fdb01345164cc7c60a6f45df |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
