RHSA-2025:22944LowCVSS 3.7

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.4

Published
December 9, 2025
Last Modified
August 13, 2026

🔗 CVE IDs covered (1)

CVE-2025-53643 →

📋 Description

CVE-2025-53643 — aiohttp: AIOHTTP HTTP Request/Response Smuggling

🎯 Affected products26

  • Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:74476396ba74d9bfa0836aec493f8f90cabd2ee54ac25214059f761e0ccc55a4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:bcf7a03251f261d26600a686cca4a19e8247cae2cb355af8e3e8215bc066f085_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:bf79d1fb4c7faa22048386a5c3eb7f1a91329f72419c502a040109799f700ccb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:e58b8c132bb30908ce0467bde27eab7ae026d602f5d80d1e120e6859eb4d351b_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1980a2e6dfe634040ac3902d0c5218399a0dd2c6832de428dcff10f0dd358c21_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1f6c06aac56036c948ea08e9ca6e969f67aa386daa4a35055ab1abb4aa270a44_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c63cb7046e32a40fcb69e0011e3be6acf2d577430dcb63d5da4b456444a86fb0_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f1c58a60a9b1e096c6b9ad81f020334afb9cdc5d628b2de2ec21cc99fae569f4_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:15d5ad251e981a67172c72687db4943b306706318cd906a27428269f7e666574_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1776f044e8b0e54037f85af9192b27ad0a5e5daef074e78bacca716ec15a76a3_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:654e2be5da6ecb0e5d9a268cc16595c7bc5ea77b5603485199d2029419a55d47_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d3d87d5cd3e37432720ebc28298798af42b16aca869d9e45055b0ca045807926_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7d40b0b37e1144daeaa81cde039af785431586e9ce2cba8df12c21351524f91a_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91a3cdb1a555fc13ad0a7db81a4f1d68ad8709d3a6c8eeaf4c43b8d0b07cd8da_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e0907a964915fbd8557de4903576a2bfec737afa84ad763c4c675c2a463070c7_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:ea316652cd41e1535dadc8c1edf508e93365def5786c947c5433285f76521dcb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:1530e9b93614fa2136787037bf61979a1a4822827ce548a9aba27412cbc8dbb5_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:269c549b0d377550d638507d1cad8e41359f5e37ac042374948213a4d0fd400e_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3845c35d4c3d0ae0234d6e39b4c79f635fa749aa0574b9026786701ef07903e6_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8922ed77ae1885d06d208ba02f3f467b3dc4f187378d764fc23b1c9e9cbf46c9_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:28e0ddff94b502c58882652d5a45a758b535a3dcb021342a12f7ab890ab079bf_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2d2450504dea628beb245c75e301de9758d84a8451af4b565f60cfd362d05d58_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:35f90720e07d003d214119558f67e63b59f7853fbe58d2954b2fb1994e324659_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8070b82e4c2c2f2e2d77d188b7745ff639cff619ca6c87a6975cc201885cf42d_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:459720a287d839ad70886879d8089d821a2f98dcc32a5db5732ecf18a05b3fa6_amd64 as a component of Red Hat OpenShift Service Mesh 3.1

✅ Remediation

See Red Hat OpenShift Service Mesh 3.1.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)