RHSA-2026:26231HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.6

Published
June 16, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-47774 →

📋 Description

CVE-2026-47774 — envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

🎯 Affected products26

  • Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:57c22050e27874f142225cb52a3cfb48662749fa11badfaefe35c27e9cf6b9d7_arm64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:7a82b4f882835509f53e3f60b395d7e58956ff4158a7ab77a78cc34835624e72_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86f9149a3246121ec96d3413eb056617530f00808552637a291f27a800932556_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:a63c47511101e2fc22f051a057a0b5307a0a546a706e6b4042d7f483ed8e368c_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:22fb322dad667f097805440d5f2a9427156a4b3bbc8fe9a2ed3466dbeef3f2f7_arm64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:23e9fbe6e6ea11e832c7f5dba42a6647468b782cacd4e1605e7ac9566cae6108_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:243ebdfcec4c9a5f856112061407632d8a3463f9a22f4b8196ba23bc978d4147_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:616a5e991ed54c8dc00b999dcedd8866fb7ded4d739079470fd306cdee4612b2_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:6a98519e5624a785b905790c9714764fc6ddd8ae4027716929397f6f8f5d8fda_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:bbdae8c7762d0028990a39ae19e39ff27a4d484563525c7c5f6f446409f2fc1a_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:f3159b0735f7f25b40b246634e4bf40b668a4ab8d9318d3c0499150b00486a34_arm64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:fe03415d573ef8d4f907795255cec3f61dcc6d864401b6cd7aa45f1685f3b08d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:0c8b094d37be696f55f4a7f3bacc89df0d7d8758ef726aa4cced8c675cedd893_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:566720d2683ddc21de68ec4a7d06998565a5b307328b62188c00a859aa01416a_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f9ad974659eaa7fb581635dc7dec5f7e561d12f39ca11fef16b416fc9634a964_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:fdab7c58feb092e4e4adcbb95c2375bdfd76fb9702539e7b92577c8197282364_arm64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3b72a06f6d0bc5a74107c7edb87af64e1878779a09946d72e6b5f181bf0f0a27_arm64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3cd40ea42fc8ac197bd3f54b4e799b4e294e14081c73b9d6011bf50b08bdff59_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8387e7640fb308b1da2ec996a1367d8da3c9a1d6b8b51a4a4c5255acd5c1cca9_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e61db9b8fb75e91717ebe5819e04212aa71b65c9e098ad800c9b03f82c38704f_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:83ffcd8afe730203afd97713292fb56e29a120b6296d03439c0e8e8cf3013186_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0c76e3710d2b156ab849a801cdfd9d4af713bf05928968a290e2e23ea7bfc6da_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:485865eb1b84b371b8584b05833a4f46267cd6ae7d748d9420cf3211fa67b513_amd64 as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a8482ac8a8eb9a7e8f06abc2f8808089ac657425c6b497ab0a16a6d45780aeed_s390x as a component of Red Hat OpenShift Service Mesh 3.2
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cfb768203c4fdd29e8229db912e47bc381dcd3841cfad9ae592461dc6b99fba5_arm64 as a component of Red Hat OpenShift Service Mesh 3.2

✅ Remediation

See Red Hat OpenShift Service Mesh 3.2.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (4)