RHSA-2026:26210HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.12

Published
June 16, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-47774 →

📋 Description

CVE-2026-47774 — envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

🎯 Affected products26

  • Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:523d7042fb9393b224fd44548f7055b9092882364e645b95b0ed93f151103ee3_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:587e343cd859881e47a400d35ae4d99eed8ba61d55adf864d0b4a051d49c90e4_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:81ef49c1b622a8932f613cd478698e27bed441173cbab750ca506dbe991a7be5_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:e58217c56fd6e2b931dca68a553533706a8413eabf3c3ed2814a68e70f915d7e_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2a0d3a49fac70f978cbacbe6221ba5c7c7e1f789c2c20c2e5eaf2f1863f420d2_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a2ad85bfef9cd49a4fe1d7a7147c44172ebf1ef1f5ae4561659452b299f48de_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c2404012746d39079c6246788a0974fdd8f660c6f9578265c2df855a7b674576_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:e5685dc1a95816e7d93c32409ca52d9a7975c24907b498aacfff6857ba8665f9_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:cf1f51ae282488f63aa76c9963b9595afb47bc576824057379d1bcf92bed70e6_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d48edb9f2a55f5f0cd2569c88b8314c9f703ef02974f22fde51d406d744e24f2_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d717699897088fa509a6502f765bff0c817d18097046d7a485cd25bc14dbd42f_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:e20ca32e1f4641c85ae428884211e6fa701f2be0230a8ab0d4eed4cf28cc9bb4_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:1c7afb9faf38ba8d9154c7d0c5878196fb991a3a2856b54332ea1b46a40121da_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:41926eaff176d83df4c076df99161a55ee395a42e5ccac60c851678e9c0ed256_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5d903e0ccad7f33cf5ffdddab8b199d4aac6b144a8958006b1d352b217a4d929_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:92172492762b5b3b15195dc2c627816ffd0068c0741ae5523d510df2d05bc285_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:30de7479aca6bdc71e323cd667d2dec4a120adf1da7b505f8c0972730ef87a86_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:48bbe11575059969889d37f590251e56da1b468b12d2b2f0032162c321108a0a_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4dcf95fc4a6a18af5dfdac190235c571bee3d750d4b829771781aeab14733389_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a7335217f0872592b1ac734aae218085d8a5c230838603ceda1507867ff1c14b_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:45cf8be75aa8bf478dcaa55deed88fef42cadc2290f1ea28b1984d04c35bc908_arm64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:60cc56c7a2697214fbd562e36060bbaf08329994f18037b69bd422fba9e2a114_amd64 as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6e0e826106365d8a0ee11c7a4e6c79ec83518341f2a175850172211e5a9b0c2d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bf55dc918a79d92726432fb45be2b61c9e3f3bf6cd139f534b051d85ebbb272d_s390x as a component of Red Hat OpenShift Service Mesh 3.0
  • registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:afba220ae878102ac25604ec734206c4859eda22973804f89c51d85e6a92184e_amd64 as a component of Red Hat OpenShift Service Mesh 3.0

✅ Remediation

See Red Hat OpenShift Service Mesh 3.0.12 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0 Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (4)