(RHSA-2020:2798) Important: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update

Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.

Security Fix(es):

• envoy: Resource exhaustion when accepting too many connections (CVE-2020-8663)

• envoy: Resource exhaustion when proxying HTTP/2 requests or responses with small data frames (CVE-2020-12603)

• envoy: Resource exhaustion when processing HTTP/1.1 headers with long field names (CVE-2020-12605)

• envoy: Resource exhaustion via HTTP/2 client requests with large payloads and improper stream windows (CVE-2020-12604)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.