Issued:
2026-02-23
Updated:
2026-02-23

RHSA-2026:3111 - Red Hat OpenShift Service Mesh 3.2.2

Synopsis

Red Hat OpenShift Service Mesh 3.2.2

Type/Severity

Security Advisory Important

Topic

Red Hat OpenShift Service Mesh 3.2.2

This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Service Mesh 3.2.2, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.

Fixes/Improvements:

  • Updated to Istio version 1.27.5

  • Support Gateway API Inference Extension v1.1

  • OCSP Memory Leak Check BSSL-Compatability

Security Fix(es):

  • istio-rhel9-operator: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

  • istio-pilot-rhel9: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

  • istio-cni-rhel9: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

Solution

See Red Hat OpenShift Service Mesh 3.2.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2

Affected Products

ProductVersionArch
Red Hat OpenShift Service Mesh3.2x86_64

Fixes

(none)

CVEs

(none)

References

Additional information