{"id":"RHSA-2022:1275","summary":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.2 security update","modified":"2026-03-27T10:03:22Z","published":"2024-09-16T07:28:23Z","upstream":["CVE-2021-43824","CVE-2021-43825","CVE-2021-43826","CVE-2022-21654","CVE-2022-21655","CVE-2022-23606","CVE-2022-23635","CVE-2022-24726"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2022:1275"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050744"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050746"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050748"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050753"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050757"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050758"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057277"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061638"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/OSSM-1074"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/OSSM-1234"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/OSSM-303"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1275.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-43824"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-43824"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43824"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-vj5m-rch8-5r2p"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-43825"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-43825"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43825"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-43826"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-43826"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43826"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-cmx3-fvgf-83mf"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-21654"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-21654"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21654"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-21655"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-21655"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21655"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-7r5p-7fmh-jxpg"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-23606"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-23606"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23606"},{"type":"ARTICLE","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-9vp2-4cp7-vvxf"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-23635"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-23635"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23635"},{"type":"ARTICLE","url":"https://istio.io/latest/news/security/istio-security-2022-003"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-24726"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-24726"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24726"},{"type":"ARTICLE","url":"https://istio.io/latest/news/security/istio-security-2022-004/"}],"affected":[{"package":{"name":"servicemesh-proxy","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-proxy-debuginfo","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-proxy-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-proxy-debugsource","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-proxy-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-proxy-wasm","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-proxy-wasm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-cni","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-cni"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-pilot-agent","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-pilot-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}},{"package":{"name":"servicemesh-pilot-discovery","ecosystem":"Red Hat:service_mesh:2.1::el8","purl":"pkg:rpm/redhat/servicemesh-pilot-discovery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2022:1275.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"}]}