RHSA-2026:34770HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.21.23 security and extras update

Published
July 7, 2026
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-6322 →

📋 Description

CVE-2026-6322 — fast-uri: fast-uri: URI authority bypass due to improper delimiter handling

🎯 Affected products191

  • Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5155030314f2efb0be5a7fe1f4dbf8edfc41af915f7fac7db10a6adbe4a86ac9_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:6f09cbddc2165982085e382db12e5503b16d7a1e79842a19157f4910257f43ef_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:94f69160b0ddda0e840a473c1e5f5fcab47eee8567ee4a927f32930b1a0e5f91_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:a9372f22f3ed5bda5c1d51a7354c6a8b4e0f603367b3c07ec6a0776352a4897f_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:38781886f8849ffc36870f3dc44c06e262b9b0524d15251bcc8e81b314ddf728_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:64c1a57597fd99e5c2cd0f3627043ab939e06a0163a3fc1554bc66f94edfa686_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b3a2d872463aa43a8c66c754472c84b355930c8618a53d8103627e2985f89efd_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:f0fbda30bb66a43d1e8127817968af6a407c1e96780ea5e023911496b2bdff32_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:277a845f5ffe398935b4fe5c035dba2a41bc23d1abce44893976487abc91514f_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:392009255b87f893829cba2f90111a2dfb6d70183d1a2e657411ce7aa459934f_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:8876c6edf54f10692f7d43d00c4f8ee1d39200db701779c5ec4d6e9e7b0508f6_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:ceda974d51671b0a78b17826e208ae8519a6509c79ec84ed2ffcfd2ee45a5382_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:6ab82578e1faf15606648c109580ef1f7cc655a75001b6b1e4bf582815407fc9_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9bd366998eabe8f3a505fcf0281a3a875d5168ab58926fa1af47216a6944b377_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:ccbf58a3edb87217efe16de650032ca9bbe162fef07c69468595ec22764c3f04_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:ddbaaa6c78e9f98ea9322fc6e9ea271656eebfcc1bdc46ac9bc0a83c9404ab00_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:36367c6dac166a814a1a76a822c67602a02aa37dee5ae602d60da867488a757e_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:3e904ee98de7fb1246da992444ee25e4ddd07806f02c2619b65ee75b315e6905_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:aa51df9e1905c0e44f7f6ecd74d6682362975c59911b9e36e905cb52a64096b9_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:e9fdcee92e84dad61b213d7a3ffe24318bbbd0b79890c779760761675bf4ce3b_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:13dfba732da2aba14e5527d2008955134978909ed8823641a21ee2e118b33498_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:338e57453aaf7b4a08df12f351894d109de6ea7926b021510197bea87b5c7284_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:98dcb57b27e6b66e4b4199e33eecfb494218a4e75944eb45e7aad765f27f48bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:b3bc0e1b1a9fa18b3d31f38198f70ee60aecaeb83d65b89806eeb69d78be1a2e_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:609cce4a625a7d1c2a83fde70db520fcdc1a4f75b78f96fd42d188f2eb623674_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:a06625622d7d52e5c21bec84047a765aeb065309ed9908eb16cf97a25e1017ac_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:a40c59091b55f2fb79b9f58aa1ebabfa836cee775d20c3c40341811ae060cf37_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:d889210346e1615778eb8346811e00b079b573afb24a0078ec77751bfa27db7b_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:9a13a11550efc801a742b3c44908941151e051d0d4a81d20d2e8982f79af1559_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • +161 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

🔗 References (4)