RHSA-2026:67859HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.69 security and extras update

Published
September 24, 2026
Last Modified
September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products148

  • Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/frr-rhel9@sha256:2853c191634e12b6e076bc146513a6ca1eaab38ad4d8bc7d0b4c973a82fa7470_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/frr-rhel9@sha256:3113f901c4c29860705dde3468c38e28270be740d2d300e1a47440ef25775e3d_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/frr-rhel9@sha256:5ce06c6978044892fced26479d11dd5ff0abdf27c734b9441b73165da534ca3f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/frr-rhel9@sha256:8aefed703a8871f828637d9083429ca10f373aa75053a2336775e1e13e1b3d66_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:51c595725fccf2c5f2d08d69ae683f7982b102046ade314953ae76a911fe0479_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:63a370b40bc565a322186c8f1aa292ec9179ed3c753c346e95dfb0559256661a_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b5403d6f5178eb4cdfee0ce79454cc350052c6f37bf5ab34c4d8a110cd152f24_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b601a90f9e5b455d10e80bc125cd674d38e1818c3a54ae1e36a8c9735d31cbf5_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:1d69f1b60a227adfddd36d6a66c7b4bdebec56046f73b4b034c53487312f0036_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b3f3dd324b525ad78992a8c1aae57da76ea5c71c8dce54245e36647ab4900851_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b5eaeb7f1ead5b3bf22effdc9fb26ba4863c39a1b629ff41ad11a541d42b7434_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:de1d5447d9a9d318b696fb1655934f3cab1ce1d96911c4bcb337a850b1df1125_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:23334b5f0686c1c9b0da254981b0090f1bd6962c979fa198a17d60cf68547050_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:40cf7097bb47c6c21ca88a15dfe41ac2c17dfc90292500b81f7fd19608ffae22_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:4783d055112faf7c1dfdc64b2371b9447e264cfe362fa6623de5c9522e10c312_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a061f250ac9f846b0266cdcb7355f798515e44352d7d4f7e4f34e0ad0603a8ae_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:51eddd49dd0c1f655ee73a99f9c32f29938bc20306102a06f2a68cd5f3b62152_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:79ac34410277d4933221421ed9e933f446f0d25957e6bc2168e4947c25009abd_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:83b3ea4e26c11f6e698ffb723f60c090b889845128d47d5c7c4ac832024dc671_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:c98b8a864be3a6f30f88237d0374f7edbcbacc24e8685d6234aeec1d2e9ce39f_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:3943ee3282008c6ce187e8a831cd7049a38739504e090f722eb073a243b70a70_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:bb3183969f03d550d7deb46c0e74b128ee901ff11a50014fde7dd94e268186d0_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:c057fe50c1b61c7a8686f742cb5600a3462ceb8cd293d012f29119805d70ba16_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:ea5aea22d31feb2a8bbcf21d2227823c70a735f9d75808ff81eebf203f2e57c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:40eec9f2325829f66c77c40494fc03b10a8bc278617f399d00fdf55fdd43ce16_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:4e7be0601ff2a611ee1954b518b1e26a01e73053832b657e8d9f942f5b638480_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:528890acfdd41ec7f3f229929621726444405eb09aba3de9c24914bd777c9c3d_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:b3d116d4f1de75ddfb69e316fc1183b1139ace778e6ed232350bbd21b26a01b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:14a61ea02052d0b9e2d8e0de26a05b1d3a1ed3a24c7273ffccf6b6278a70260c_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +118 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)