RHSA-2026:26222HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.9

Published
June 16, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-47774 →

📋 Description

CVE-2026-47774 — envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

🎯 Affected products26

  • Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:9ce34e666db0e2233e6c7cd8abec6f1ff1666e280a066121dbdc88fdee5ee8f5_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:a6e721cec618a366f6e637eef207e5ac9b1df5b28bf143602f2e650c225a9596_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:d3147f84726a242fb2607b8f90180a6d369fe6bb2c36185da738482e21e35078_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:edd134df753b3489efc2193c51c86f0412f54ea55a9f206cfd06019a62c73d7a_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1320da6136d8524476a1336673f89f8299d8fce9bf4a7890e78e358acc68a600_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:32fb5e53668e0872180d83bc00476a59c249ec22b80f688d79949fab487122ac_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4777696dc53510105af1752f853171546afc636f7153f31044659dc4d619b401_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4b4ef260ada8181e6214bada86f09f4eca5bbab4bad89c905ce09178780f23d9_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:12d10ab7c35446cb17cc5d62b6c24a8d01a70c96f6ff8987007f0a833b869d8f_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a53a1ae23f9233c53e64b8184662f2d7d01ef87a6faca95523c020792772812_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:3773a5dd56eeddc0cefcc17be4db773c6149192e7acab0dd6d313bb2cbd98034_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:fa628f1f7283aac46894322071880035672f7190b48321fd24575b15f591d510_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0d296152d81a70b3bc20d85e96d2bf8c47cac0ee36993018cdba702c79e8d4cf_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2e87fc0db414d7b20ca471225ee9f4f7e3e8d6b0d73758bb787f938452b9fef8_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:57cfcd3e3202d88981379ced33bac62bb1dc2da57bb9de5c4b7c1b2005d9fd6d_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:9198bc607d1c1fdce35760015751103c9746a25444f2507d3f6ab452bb564ce4_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:18b5e5e2b3a8f74d40c18bbd58e84c8031e0eacfeadb9532d6e4a02dab0b1056_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:1c296024f2ec78190d8ce84f8e84819f84376c1047026952a1cd2fc4948c4090_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:6991e2da2e80b475a074d5d6f88d369218f3f0685da9cf1681fff832f732332d_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:d959a970e9e8f3abdeac805802d98a1974e6c564fee39871cfe9ccaa2660ae75_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3b7ce5c040e508387ac72012147a6c6c76fcf1be0b8132219eafd92ec4e3d995_amd64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3ba2aa7c56993a908ca5a92b828d0bdfe05cbd99cace53e2879425b0bb750fa0_arm64 as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:4e8b65eb6ff94ee67449fbde63f7800dfece156139fa2facd851f0190bc85f85_s390x as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:98741c91d31acc5f8ffceafe6ec78031044e67b272f7bc3613f9121f5d63401f_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1
  • registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:ad9538959ca5035ec315dbb597343b67dab3979417fc3003e77888f1a8ed7827_amd64 as a component of Red Hat OpenShift Service Mesh 3.1

✅ Remediation

See Red Hat OpenShift Service Mesh 3.1.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1 Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (4)