RHSA-2026:26247HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.4

Published
June 16, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-47774 →

📋 Description

CVE-2026-47774 — envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

🎯 Affected products26

  • Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:59fe5085f0c9e3aeeee3f34c1f76df7eb636ea090d8d3128c425a4c32b71fd69_s390x as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:66ad6ad07870afc1357b1480c0c591a86e206ca76cbddd9dd5efb8812569537b_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:7c93788b8c6eb3d36d80a8e0fb66b7db370ccd50fb78cf2d2378d14a05f87a9a_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:d25c8161022288f9f9ba42c75f250e20122892891499c3d3e165d939d421e746_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8450eb411dd1f37f5b4a7edeb2afb17c5f7794ee75e1c2c09113d46415fc7318_s390x as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c25237a503e63fc6fe16f03c783df49e03d7ffe87753cdbcfb3a07b17bff6aa7_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d678c75a3bdb0eb72505e82c5ee3cdc17a43c466aa9a2b48d5749ea25a509656_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d71f9ff7b96d37596b2d2120e53caef09d336bf8e0fa629a4ca19e895855db21_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2aafc7b43e740a0b829afd1017c3843e24d2818f9361620557588cd2141cb718_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:616565cc2d12ee3f399d19117878d4d4dcf65d60d6ce3befaea68b20663db7e5_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:96d1dac863cc10892fcc1381695077193dd0d00d6c719a1024422059f69e65bb_s390x as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d94b79e1ddb87b4e2181408afc11cb84bd6a9c749028faa3653412f19de5a511_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:215cb6b3601b4717644a989d834603079201ca5b7d5f235123d515ac35c51088_s390x as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:c39845ef1238ded68ad33f97189bc6e4414c80967c8edb1a6b779920a9818d7e_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:db328d4648c30a8080dba6cc40a9d077d172ee8383137ba897b71a987167e8a7_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:df8f04d5ef0803440579658d273900bb9f643e91e89a3986de19c362aa7d3539_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:39c2eea423cd822eac5537b21fd74b24732d891c726dabade2eee516dff1abf9_s390x as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:93edf7112509fec39c838a52724ec19fc7ec948a0f4aeaacd6092fd7648e0b7d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:efa1d5925639c397d82967b0fc36f8a9695abc940b88061734b91fb25afb0b74_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:f13c5423bb47b3e1e2ed5e137c47b3616898f1bdb4ff5316b029500e3334c448_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:e3712a16441ba402c3df852b757d2d04b83772cd3bb1858688c5df2faf9b9a77_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ee97c0bace1ef2b81886d2607dbd6cee91494544c30d88e1fb030f7018b1713_amd64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b54c37135730492f98ddd75c9e9998e281ac71730692f77a676879b5135ac2_arm64 as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a0af444b19f15990a251a1de7de89e45400ee62612d2a12c98d917f99349e560_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3
  • registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c91642247486c86586ec5328e0e0ddffe0fa891d31eff59ff7af80d412a2a02b_s390x as a component of Red Hat OpenShift Service Mesh 3.3

✅ Remediation

See Red Hat OpenShift Service Mesh 3.3.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3 Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (4)