RHSA-2026:66359HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.14 security and extras update

Published
September 15, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-46597 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-46597 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

🎯 Affected products171

  • Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:09d5f45340d0f9c7808309cc26c4ec5105930f2bfbed04c0e932a4a708dc48b5_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:6461bef0d5b5935ec2cdb7e760ad7d633c8249b892fb7193d84ad2397d322561_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:bd11628cbcf9e1651faf80bf4445737063369045b73eb8e5afb1f09ff10e1b9f_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:e3ca6f2920dedd0ef119e1bd7e4635dfde0e1d33452404b38ca7505a590b21a3_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:2a7d90fba004ddf4de88d5307f13667acc18e267034a7c3a1e0c742db6404cf7_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:94349431becd6f34c19bc85d354afdb212b9564aa3b736aa0e7f38127b5bb2b4_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:c9693050b15bb2a00a77dfe47bae7eb2309f74c224f50f79cff72b7bed196f09_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fb82460b065987cdca82bd72446aac8e764ef31cb5cd8001ac8489131d651671_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d7726cc24395ab8ac5fb2f7bc86f82aa83eebdb773b0ecd949a6bde9c416d3b_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4143290109f807e532fdf14cde6247dc0e3b689e011dc7b90e561f89fef28543_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:aa9d8b1f9b54d0f167998f59d8627818a7444daf9c32a4b46d33961a155751ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e763a9e5bf1e28dd98971812648aa8c3e9239874e4d0401d56bb5875488ba88f_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:07e057145fbcdd12ef174625143939045043b825fa41adbcd632a3e851c0f34e_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:16538096807f7e331936e3ca17ad94d1401fadbcbb064130c5d54588f2144c95_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:8717795a9fdfe00a49ab04b803025199ffc9d16460c3294bfde7e8f053e7ce53_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:f47da540fe9f72aeb72844f7214bfe8ab5d932a9ce2d98117e6732d278689fa9_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:227e28f58752ce68806d75c50fd773107f20694b3f8309dcd0ee968164828464_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:43600354accd0aaa03e4ce4eddf939dd7742e6b27b0dec29b336eb11e81ca052_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:9a83e420e4987264b4bc7cdc7ac35fc09f090060efd987a493b97625f495a3d7_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:e7e4ddfdac3ee2ccfface4993b9f7a0931ead57430f24809b8a0baed672aab75_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:1489e015ed7ecc34df63ff916cc410a343a791f3d7f7ba4536d259b559f4ea13_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:36dd1acf658b0f3c2120e3dc2e7976e2755bd84335e3f40d9919a84b7f7b57e2_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:ba4eeb587606abd96994b5ce3cdd5c0bb53976f3e729706679067c79f00d42b6_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:c3dff5c14fd1ad19e093c1a7095ea13d61f7642f8546e1a18bba972e19a1bb67_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:58bf488323b4d0619fc39a7e5e2d7f5f0955b7ec55a311721f9841133841072a_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:d0bc63c328908a87eed6af9991c901b9c99963d02539fc450828f440f9269831_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dadde83dbe18cba14bd2d11c1240fd048259d15eea5977460323442158797e5a_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:f6843f1a36ed93629f16b635a83b2ff8eeb66966396da93fbadeb55292238189_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:06a82da7c4533f5ecd9cd4e6375a68a9e317ad2d7bbff902b26c29581d4c660c_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • +141 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)