- Issued:
- 2025-05-29
- Updated:
- 2025-05-29
RHSA-2025:8298 - Security Advisory
Synopsis
Red Hat OpenShift Service Mesh 3.0.2
Type/Severity
Security Advisory: Moderate
Topic
Red Hat OpenShift Service Mesh 3.0.2
This update has a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section
Description
Red Hat OpenShift Service Mesh 3.0.2, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application
Security Fix(es):
- openshift-istio-cni-container: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section
Solution
See Red Hat OpenShift Service Mesh 3.0.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0
Fixes
(none)CVEs
amd64
| registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:12cc152afeeaa61a08a6dcea4f90678452a2838f847e2669843b857faafef420 |
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:49df40a2dba8c3d559690f0991048b3d5f8299ae7f1b8b1f4f26e37ab1d5fef0 |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:b05675c28630704dfae7644937f19b507a7cb06817d439eec39a1ed4f8e5952a |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef67fed9c1dd2811911f521aaccb55a8ac1b43dec08db0d1a55abbcf34b4dbed |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:17f75d3da017d37b1643c03ee4860ab7c5d59eefb57036def6f629129615f395 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:30e92a0afa7b92afdaa341af591e69f3d4f124c144367b9a1cf9888b1e356779 |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:783b5eb3020b0f142e08eec1a636200b98d9db69b17e6ff7328682b40ea50afa |
arm64
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:5ed60bf8a241e8e6d5f169bd0039a79f00c202f94a7851cb0588927fd9627dda |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1c8030fcf4e017da48d7199826188cb570ee2f72da34c14d4bb8571d715f9837 |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:22e40ab1ca112ecfc7577bc85d3a8ce0f726273eaeaef495d4f01093304d5cb6 |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2262db9493ac2fab426bc50faa6d1e85d09db36184b615cce7641c935b39af84 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b4de2c0890e39ef4aba1d7a4f6422a0229a44bfc394d332bd096917bc2b8a6e6 |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:9c96b625592951eecbe5fc36191a6bb0bc84ff4c3a72dd3c1a1b41326e78caaf |
ppc64le
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:17efb7b8a57d5ed181046c22dbab38edccbfdc348f47f33057bf5f802b88983d |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5e9d382d2a0637cf87a0ca25072b3143ddd1e62db63398b11bf298f2f32687c5 |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eca7d7db0d5a0721bb0f7ce801bfdd1dadabe8c3e205bcf9ce3753c41f32d5f7 |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:4c82a11429fcd2508f2406e7e4445c49b553e927aeb897124b64d54e5dd61d48 |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e0e74665fa6930e2e0c688791c9960fd0a9855cf522f6d0f864dc98c0adfef4f |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:35f61411f1e89714ea8f7c885e3191422603e302a6dd1ebb63d3a44d8bb7dd79 |
s390x
| registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3a7f9a4d81b0c801a045b93d5fc0ea3f6bd051f6badf4dc1ec8d812a348d98e5 |
| registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:40af27bc3315199b785c920fd894a4d40ff35d121bdd0935204936596d60a6d0 |
| registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e51ca9b09c06058a147c87ced635bffbbc46bfd6640e4d4c47a27314fa4d89d3 |
| registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:9a35938a0b7f35042248caedddf961e2c1a0318d05ded9411b72d88a1b8ad1be |
| registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e65e678d2a4a215b321199936dc990bca5d5a133579433398ba7610f439778b1 |
| registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:b6df9c5d2b63bdc8b91e5b42dc07f49947e4dac2ac0e6f9846b06f441fa3edf0 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
