RHSA-2026:29795HighCVSS 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.22.3 bug fix and security update

Published
June 30, 2026
Last Modified
October 14, 2026

🔗 CVE IDs covered (5)

CVE-2026-6322 →CVE-2026-9277 →CVE-2026-35469 →CVE-2026-44293 →CVE-2026-4800 →

📋 Description

CVE-2026-4800 — lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-6322 — fast-uri: fast-uri: URI authority bypass due to improper delimiter handling CVE-2026-9277 — shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators CVE-2026-35469 — Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code CVE-2026-44293 — protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:497bdde183db236ab15373bfc8147fdeb1595f7faf46f01c47c94ab1ab819c74_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:953af4b7a1a3a04df1ab3f449078d2341f58e69348fb25f40ff5d77e8b502f07_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:ca3eb47b276546d99575e23ff6ffb90999174fea72a87ca94db7082fc6b27752_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:e46cf94f934eadd7260074026b810e42bb0325e1b37d2edc509e9495af2e93c0_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:80b6ebf6c1ee0d29fe888854753534fa9575f24ac39b6ebcf073d8cc90975f8c_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:c73b50ee76b27e13d658babca75905d13c138d36891de594facd979e5bdecd53_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:cb277686a199d192ae577b92fb69ef3759da94b40d5c2fc41c275b78571a67e9_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:ea063bd12a2812d384afe7ca265a264970f498aa47389882c64776ef5ad6ed2c_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:3928f9bff14d795c204fd14eada9dddc6f4a76b78d6cb95d56a86ce4bddd2b7c_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:5bdf1641493267da64d764facf900633907852a01dd1b286217073bf47239d0d_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:7ac3c8560bf3d6f366102967a1203f2b8275febf65e9445ae2420e30f20e92b7_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:f2a28d7e4eaed44df88d1199b68c6df376ba77477104be5c683246ac30cb6112_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:0b20eb7cfd1ede9348ede18edbdd04f8bd1071c8142541cecd2076155efee36c_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:48341b70dad2a41d43818803fc1c3ec7aaf6949ae7c2a23f3fe1dd081cf93983_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:8d23a6d532f2a2a6e1f85857dd285a8df6b70ae11bb9455a9c8136cfb57ebf20_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:c5ad859986b3951d941cff3382bcc7b9245d9ab3e90fcb803c03245b28d582f8_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:3392b03fd00b5f6a897b46d17032d15bc676135d56e7ebf6a7ad61fde55941e1_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:3ded1f1c71098e2c4baeb72e69629741937502716d9ba82eca83bdd7c1dd2ee4_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:577f18b6fd75b81ff1083f5af72fd779346b04f2c27fe8f068d4639ba10c1acc_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:8b02b931a3117277442548ec42dd7cee112fcbe0722d6a71615a1feae9bf9f2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:2e579b0a0c10d0b90bd8720f93584357da9fc1c766ebcca059b3d583fca2fb8e_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:80fb4e19fd1a04faba9e0a45131adc0829dc9126c6ae1a89102ea4f3b618be99_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:ad1d52832d0243512d2664282584134d63731cc49451c4f2a8688ece0c24f12f_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:dd852006844937c64e200d1646dc8eb044b52a89259ed76bba1265b26b79834e_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:0f5bcd7884218d39c6146046ff088c7454a64c43b77f9d1f1024d5a4da4579ce_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:6be68d92ccde218752f24c3f089c2f392f209e1243dd0d75839d62b9930e34b7_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:7e5345e0d61b5bc4c37f4006123fd594484085232155b912d9499def83c51cfc_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:eb9f5e48efc2dd8d47cc17813848ccea68abebfd57fc263160b3aecdbce7bc9a_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0b2cb4b755d32aff7b13fe1a3bc2a221d2f2e8910d65bda68c57cb6bdfe7054c_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:df94fff5219721391e48098e258d7bc8a645b1d635a1b65148dc29f2ecb749c8 (For s390x architecture) The image digest is sha256:dfa06fb4060abd00d341c5b15448abeaaccf910935a21aae34c0c9ffb817cf54 (For ppc64le architecture) The image digest is sha256:375e6cf29ce2223dc2306ea20f0d96dacdc231404347c3f11dac31c52adc5869 (For aarch64 architecture) The image digest is sha256:4af39b7d98ee6644ceda05ec45ff395b3867816eab5f8d2dc130ffcea965020a All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)