What is RHSA-2026:47703?

RHSA-2026:47703 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update

Which CVE IDs does RHSA-2026:47703 cover?

RHSA-2026:47703 covers the following CVE IDs: CVE-2026-46579. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:47703?

RHSA-2026:47703 has a CVSS v3 base score of 7.4, published by Red Hat Product Security.

Which products are affected by RHSA-2026:47703?

RHSA-2026:47703 affects 191 products, including: Red Hat OpenShift Container Platform 4.12; registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:8aa1d8afa8e622309e5ca2ccfade3bf6c169a27643845514b340b4eede2394a5_amd64 as a component of Red Hat OpenShift Container Platform 4.12; registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:7e2b40fa0a956cae920feca049caf0f26f004a240e1509eade8d4aee4cf75547_amd64 as a component of Red Hat OpenShift Container Platform 4.12; registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:cea42ef663bf65fa57b3be4558ae2c79610e35e6d4cfb54699dfdbe00d4e2d28_amd64 as a component of Red Hat OpenShift Container Platform 4.12; registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:156adeb288dd890dd2804e682668a96f949e3c0326399b9d98905cdb8ec5ab10_amd64 as a component of Red Hat OpenShift Container Platform 4.12; and others — see the full list on the advisory page.

RHSA-2026:47703HighCVSS 7.4

Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update

Vendor

Red Hat Product Security

Published

August 6, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-46579 →

📋 Description

CVE-2026-46579 — openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend

🎯 Affected products191

Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:8aa1d8afa8e622309e5ca2ccfade3bf6c169a27643845514b340b4eede2394a5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:7e2b40fa0a956cae920feca049caf0f26f004a240e1509eade8d4aee4cf75547_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:cea42ef663bf65fa57b3be4558ae2c79610e35e6d4cfb54699dfdbe00d4e2d28_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:156adeb288dd890dd2804e682668a96f949e3c0326399b9d98905cdb8ec5ab10_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/network-tools-rhel8@sha256:6908ff4ca9c8bb5c396dff1cc93cf70a730cc93da87422410a79a09d3703f4cd_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:0911b0665789c0afeec69e60c242d0890525bab5f03f72c943919da9c2477965_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:70e8c67e364b80882bc7b00c9f7859b3aedb7fd69f751437a687bb1f30a94ada_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:7de17196a7d96f542dbbb22cb3f8421d0c42a089437a8b303fb6ce4bc9a1c2e8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:a071e25124bcf6f3af99bb86b955c2fbcaf91e904becfde516fdbda50583f0f3_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:ed580aed3a172ba159bfa160935e3a9f6da0c5393519df1ca84ff44e0bb4605e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:fe9e1358f9d05f8604770a2cfb8d65687ade1ba45c673988c5a2f7cebc98e2a8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:8156c19e930cc75665dbf3d4b3e09839854b8c2096354c3521b3ed754a31c881_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:61ab51ab00628de90506cadb737adaec2a23e8caf5b87213d7a3f066f0cc6d4c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:8baa52ea183e61188b68bf6634d5eba3d28522606b08c55d57d53764dafa4e5b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:8c057cd96b32456ff515f8d9ad42bf8639f6d456417fe5dc7087c3ce71926736_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:0d25b444085e78668910c97e379b79055374e6c0c3a36b61a91b4ed761f61cc0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:e6daab693956167572dde5319911cabd5d665f79277edcbc0013f1f7a3d882df_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:6cf737a1ec9cb2d0695c6444a6f924cbe92b13359dd42be179be1882a5c06201_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:259a5668ec3c7dd3a409fb9af0b3824f168eed4124a26406e56076452de39938_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:746d37d5ef858393d192810748362c734030df8fddb5ef26d63ae99d1384f8bf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:a48b8ea834a98e8082a22a3c74dae27e4f43d5d1284aa39101b5a94eb4bb5968_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:0240f2ab2132f1c362817bb61350c8164114f222f4a479606513e7c2622d614f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:7b2d024b13d1e28b6355d7669e1ecfed7058e3fe99b8d72e0dc3ed5e67212be8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:da5656e2c3d72b7348a6805e86adf17eeca0e9a56f6f5d7b062db9e06f2021b6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:1172aeeaded80732718892452ec459a09db1149aff7b85831950be3cd1ba4474_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:d61ebe62419a384a5c44f539ccd78b172cc407eb350c0a47af72e51b1d5d89bb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:c78465ab0360746be1d2851f0bb2caab0fc16cac0f871d50ce41b65ec1aadc22_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:8baceb6915579486371f7c84a437a115bc3d8d9d4d079fd4007ba5b88bc39672_amd64 as a component of Red Hat OpenShift Container Platform 4.12
registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:459c4329d31b41771c2b5c2d0e97d3a46b99d6ea7777ccaa56de2a8e7898ac4a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
+161 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:7c196c53350705a178672825ab9582d73bd37701c6d9ed7ea3367c19fe189ddc All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products191

✅ Remediation

🔗 References (4)