RHSA-2026:66353HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.21.33 security and extras update

Published
September 15, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products171

  • Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0a7dc177e7e2b6b64885235c92c04bc1ab9475a1e9cd8f1b03fc9428c7303b87_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2aa10f5dc7a4321793a48b0054fe24ad6ab2e80599c378dd003fb48dc2a73259_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:c1369f7667f9584e87099f66d4cb92365da6753fe63046a96eafba7371255804_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:f2660e46c3836a9c5e211b2b7b809a54bcb9c8aafc0a9b6e9671879ac42c1d85_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:0c56598406264d6fa071bd0fb4f4a28fef21ea2bbfbdefee6a1911ab95d789b5_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5456388759b404a2ca623dd11794864a949fcd254c1c767740b8b21198f875ee_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:a48cae3af7efcb4281b4d8dabf1272b411a98322182a3e4d5c024ece97d96d33_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:c59a7d40b79dc487206ca18e7167a39a438934d95d16148a109edc5d769a8c24_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:08170e29cb8f01ebc0b6e960fbc3f44671a111672f286cfdae77c0cb636bb88c_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:5b0dbae8fa48312926af6e42f482cf819b83e51ba4f0ed063c40f4ff48684c67_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7c054b73d05e31938ee9e6a2ee72314831d45f9f06eb588c84478f8b657e92e6_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:d868eb62f6b182a535837adee5a6cabb0801a08d523e0a69561b6fed0d93a231_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:098c4fe3ada9ad62f7dd719f9523ff5b80d285ce46cea9293edd75c972a13665_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:177dd9e4f58715ad8697e007770b011c465b2c320e821e48629d9c45242efac1_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:1f8dfb43e119ed4a3a4444dc9b8206dba530e9a56983c9381e73300a77c4b4b5_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:1fe09f944e9f916b1c17f9e4abb98160b57bfe45d10f7c5b688ac15f3a19238e_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:05c5d5e096e171000dc044cc7c3fad5a7f1b5e8678088fa3a6e022dbe2ecde3a_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2686823620bf5830e2edcf96f9b72f54d459841795120b8e14f46ef3df173f94_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:40c6f007575b0d0d2a356959324ebb77b8c2f235bc7c75867ad6769b2868d320_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:8bf2575e96f338d93c9a535037d443dbc42c045d294292fa7812ee8cf332eff1_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:0c5d3695f280c65dd17f0acf86337e58a6b7abc8809fb82c4241412c92216997_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:3fc98cf4a4b4972aaf6e6366e99dba05ba8b5dd619bc3a6a89d54c5648a99e0d_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:599e03ade44a71415d98244d012355287dc0b97ee8d37b56a643a1276fbf765a_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:811d1e226bbb38d349bf052c0ce520f8a0c6fe19823c794910c53da39a34944b_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:48d1dc5035ec4e6c3a952aa85ae509ceec81716042e959679e68e636c9b0906c_amd64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:ad84cc18d8e16250a02da67d26ead0732a0a8fa16e7f2a615f028cf37f1b3896_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c1366dedb9576e7d4535b35011ed32c7c92158af83e50fddf2de72f1b2aaa4fd_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:f346c6df3ad657a9e0a5e900f63063a347cf3318b797f5a89b533d5f9aa064cc_s390x as a component of Red Hat OpenShift Container Platform 4.21
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:25718fd60a86645fac055f1de6e2f2fb31b33b64e2c835af6814efb941f8c93c_arm64 as a component of Red Hat OpenShift Container Platform 4.21
  • +141 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)