RHSA-2026:66378HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.38 security and extras update

Published
September 15, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products162

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0b9c3089a863851884710cbd0d1445b6bc3110eebe349a7509a59399b46fb1f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5ff4e01aff2ba56a8e1558c7e3593068a1269d8f21dc74f19011014ecfa4379e_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b8e17214759fae33c5ff2dca03685fc7a9f5565e15e64dc712f656d3cc6805a1_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:da86330153091f9e46f5dabca6c3a5009c4f6aca929a8e61b8965a4270793706_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:54d7039d24f0e2e561f0927aa62e67986e271351dad65c0d3ba9bb73bfb7cc11_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7013a9daec75bed3166aab79dd115f44c930ab5ae6a6bf25ea0e27f8cfe53458_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:cba5618eac735e7533620d9d82b42341629227292ba27b5ec01006aaef96c524_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d811f2fead8193d44d4fd917897a584ef82a53744a4547c97bed71cc7e21589b_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1175af5ce11044c5d61837db31d449ec962b35ef1b75c7c071ddff548e134e4c_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4e5cf5620e5655be85eff225d8314c53679710f3b3598b1647bb748f9f9c649f_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:52cd920571d7e1d8e1b848344d4a15dc649beecebdd8e78dfd576412bf82b01c_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:c04712553609ca053a415db53b927ac686b54d2f74e10388415167ecd1e09eb8_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:198fd2f324b56b8c7b495c17a9431c456c52a07416bbe333484dc14452ab70e6_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9ce10f4c9f75c308bad9f693c4258c77333ae765f757f54c9e2a8fc845ff8f8f_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b610a16e9d7c4aaebb62fafce0498d015d4f2d12f89ff11ff6c6375eb836aef8_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:eff4083a4968e4fe72edc75536ca9b7806dbf2d5be53c7cf27cdcfde2511f2f5_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:3f4fc47ae1a324a4650aa4ccdef1956702dc1378e5aad9ae5790c050ea7475dd_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:92ce5573292865a89367f0e8e99da64eebb27c226046e901f7946346283c19dc_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:d3cc48dcf95693af5cbf37d972200001202454225def52a59105ec6357da5c43_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:da8fae28491416d03716cdceb68986587a92a42ca0a6b87f500b52246661af5b_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:29e155dd2226156a0abfb74ecee11f0bdb9476c18828763c13293c1633243f4a_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:303b22df5f4e1769de2e381b69ec363df495b98050d436b8069507c52bd60f4e_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:58045dc0e2e34ee013db781f1051af846b5fe3f4a570e9a213b013e2bbf8f271_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f902d295c21a6e396d7f96cc9f6a3e638e8d6f98a4579ee3923538d56b7f3016_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:4c0a29fa77d1ad57a62a8891617a5513af7bf4cdb3749a38cb63c3db6ae320ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:75a5c0caeb8e97896d38af8c0b3819986d7687d6685a7a6ff9a4b386ea768b9a_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:795a9c14dc519d8f90f963a15879daca7b160815428702112c30444f7b1520b4_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8787f520927e48a089d752a8ac2670031f9482aaada3807d9b964179b5dfcabb_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:088047d2af6a4de30426664c3b58d662d4a05c7cfc6a3dd753f8ad102438602c_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • +132 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)