RHSA-2026:65908HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Published
September 17, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products191

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:c8c155ee7e2a629d4c197542aa08f0d2c455cd2b1d78d0a035ddec8a7ac3aa9f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:688664c805896e07495f4634180e684938f346ec394bfcfd90200b69a29e5311_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:98495d552e4eb428c9848ee273953da970e5572881e6642ca3be00c844be4c64_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:1784f42ad30a25e1b68bf00fddee4b924eddce46135e4a53097be34749b4eb72_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:75a2eb41cfbeeb03ef5ffc8eee6d0659e9815fb40fd19c5f2c76d4b74602ad2e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:da5db61bdc41fe4acf59c3ba42696ee10168368ddec431e3542ec304a747e608_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:66fb112ddf4f8792e048fa4a61160846f122e2126136650697277b0db7187991_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:3215b7061ed73450c90e5a3b13aa2e1d89bc78880d5fbe0264f46953c56d4d95_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:dbc329be2aab69278bdced7415b7488c1d9534fdfca542ce96a773236e1b6a72_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:8605c4ad5a8754a56f7d5da31f7e4d9e248a6ecfefdc601200d31f8e5f8978d3_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:c5fb9dce2f79687e32d4c806f940e598f34cb077c0c0488e5853fcae3c7eff81_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:646a94774bad3265fdfd8d1379e6985e65db72d0907fbde5f33d62cdd2c23c86_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:cc7f7030460b9bd9332bf500d0a4ee7a5fa3ce9a71a06e01bdb8133ce15680a9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:875a96c47f0ba81eb9d2af516aac3d35cfef0c82bd75f57797a506195f93d948_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:29b893d1a014dbc8eff4918b09f81c7d470b6e408e82daeef8441ac3c311c42b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:0c53fad6d22c9613c3c7f4c7647aa8ce655ae3cbc587cd73c81590b964ce33c8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:88009560a6c991c1f12a1d3bb7e5dfab5d2b3f57b05a2aad623662f8373ce128_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:cf0276b392363a7f3ba2373f3640896a201560b6ad97dda9ae64b193a3c8e147_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:a82fef1c74657fe935d74e4959f4b9b5457d7de3968284e971552983e254251b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:67d7861ec1f479fd9d9b44a58f21c72f5239511cc10e7d12621d7246707385a5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:a28820894ab8c5a6472f53222c3e43d0045dcc3b9180466dce7bb6d93e22714c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:eeed00dfd3f92647147f147132dc3eb18770c32446ba5e8099a5a6a8c0025ea5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:9d2275e0a7f6c96e892995f97a9b10430ef230882d782ad2ba196a211e6e719e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:da6f80e2aa4eaf491d922b775a22c3bf12863dcc3944ac9b5d5e693ffeaef85a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:d3f97f5dcf4869d7dfb00cb13d2cbbbf91fad07941d73f4b969b547b5c900baf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:b96bc75d58d1b3d1282ecc25c417c0bd08bb6f5f543ccc4acbd77de86a4835ea_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:1b7311fec338f03dfa7bd70ca153aee938b053b24a6eac7049584e6674e6c349_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:bc7bdc4adeb37ace2d6dbc9cb2b58d8a97bc701ad95f911af601659dec8fc2f0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:de31e9aefb373319872c4a29cf85b9efd23613af545f22ec4cdfc3da1e31ac5f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +161 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:0ba3b9ea13531f643027339fef1e1a1e04bd4d87f3387f25e6d7e3dfa64bad52 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)