RHSA-2026:71448HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.49 security and extras update

Published
September 30, 2026
Last Modified
September 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products170

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:996922b76b7ec865c9186e84661cbecf1ebde06af5e9423acaab8414f0caba7a_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:e3a5abdcc1ddac977c6caef92b129539fb9018cb3cabac7e060cc2be1df8d6cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:eeed65fcb5cbe9b80ea43ceed4847d20c592ab08386bb377ab690e1f6c18584b_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:fe5a2575d75ab4452e4b57f938d982f6f76fe0bff20913f9790cbb5ac4283758_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:255201896206af7a6552ececd95a71ed3f3f6b55f4cfd917e33dc72f72641eef_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:79b0b7ba3cc3c3cd2728552a76a5040910f1c36adc5997f851321dd2215fe6a4_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7fbc9a08e303a05a8cad9fc3c91abf21b378e35103aee4b10d9b7c7a5e5b4295_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:9caf4575858a77f7fea6042d0d4d2fc6a6463a1d0c1aeb30a5a25814841f67b9_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:48b7bf099f6801598a6ea7c66b5706214eebc43c45df7c7b4d1fd7a097c696e0_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:5d3b4c0471ea5a341dadb7b889fa02ba65f5e14d4138963f9969cc9ea3d44f8f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7252b36d127b9a06ab7c111de7ba8d107a864dd10d388e00e0951043100b9078_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7d04b76dfa66e01abc571bff148c88d38d3df0f6ca44b4d6544e759faf1eb15d_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9452314d87ff86d13dd015d080c5a4d0161398f47530374f2c234a818122c5c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9713f969f10d49d74a73541a4fd159ec9cb2f200b8f3541e8f50a4553f45a8c7_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e3bfaccc3722261d4d8dcc4c319e03034d1c8f68026c497ac2c1fa78011b178a_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e87f337ff6e056ca9f84af3245cfcd78effd4d5f584173d2603e3a64d57712b6_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:754b618a8f9b79a5092fb86cb08b774757a8037fbc22f1167fcceac44a593524_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:c4493b49d4213f139e87716db1374816ca2563bfabdc3f7e9805cffa9e31c485_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:eb0bc547a3442cb9e6429eb488085451e4c1a44ef11129cb5ca2e39ea47bc101_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fdcbba0ddf9585301ee516f096d12ef11c6a692820d4f0e0f548a6830a8121c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:162b660d0b99efadacb7f19bf82309e659aa26610efe3ee7af364362362859e2_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:32d39502b987e24307fdf2b12fc203c222269e0bfb76bb677e5abc6b786ab2f5_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:541f9e8377cfc628b1d3b59c3953906f19850f490bf90083db281a99c0c9cbe5_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:5c4d60cab016e6389e10669b98463fc534f2320eb63ecae9d4c3ea898e8b7179_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:4d5b17116ef28e283decf5e1253eadf1b0f4f2b641468864a5aaa40204262614_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8b54fd03569eaee98ddb3c34bac8ee88b2a0b47610f2229cb82fb7346ea80683_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8fb41c4dea51c3179a114095522caf80f77e1bc2703103e65691a48cd26fb739_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c4269526dc1df603b0d8fc2aec6be331c37f3b0470e0141b817fb214cdac53cc_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:1037473aefc7007dc70bbcc59ee88a2fa5e6c061ecb1ab2acfc742d364f661ed_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • +140 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)