RHSA-2026:71451HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.40 security and extras update

Published
September 29, 2026
Last Modified
September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products162

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:31d3012edc9bf12cce56f6a2e677866d92e1c31d230a643300eaf99809e1a816_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5fa89c3a8a67921d49be2339a977c0eb743e573bccaf82ef5e62e96c72668c33_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:725f0972459b6b3ddbe1089c584bfb91fc1798149ab5643c30490ee34a7e7014_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ff68ffdab4424b74ff1e338cd1a4569266f7b9b66b7e0892ec528092e0273a2c_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:04231d4d2c87a3fb8153463861860afb2a09d8771eb14dbd6a3f6db11a696c24_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b37c4c4126f24f298998e9d8bcc94f5febc9f974cf0cdc4a6c29c975d7384794_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:e3b6861c71a8c6b5c426e62ed2610d25a03373e91c1b14f7a0845129e893b0d4_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:ef3cfd5a5fcd3c785912358a736803c8c090be7ff9aebdb7681265a2d0c5f247_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:3bc06b0da316320df2d98d6c19acfe530824260f6faa279d1750c6641e0b2a0f_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:74d7d280738a1638028a977e20fc09abb051370c03118f83c5f28f242662fcf4_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:8e5cc2973c216d7c68c691cec1bccc9e2fa7f29979d8917a4e97dd1564b2e660_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:afa2937721580c8719a15ff07d8a423437405c61db2ba3a4765194b54a30605e_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:155cdde858519d04492a5d2e4c1a184f6fba285d098390da0d9f744c48876aeb_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b3946addb5d7b19237b0c1796a85b8b905a4b38e0d82a27a0b313b8210ff506e_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e0eedf2fd2c5138e8b81456f1feba1918ae61447e477ace6c10dd0cfb8834343_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:fe45037a5c089c4bd2c5bb55dc8e6c3fdcb05a61f0bcd095512c15ab028e7e8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:1cbea3a2d50ac3106a98b265db4f10e36c5f79460d2cd060c1a6ba633a236bbc_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:46948e8c3d0909de1ce841fd59d618044b080c51f7bdc002f7dcfe688be30518_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a9061e178c8c9a771bef6ff1967de4553278e592ea35afaec32be4312378b216_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fea0b442c01b4afb34415e346ad7f13058e1807239a9c4afd6d89d295a1aec3a_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:0ff61626d1184bddd4d1398803cbe0fa3901754644b4bd01f86a5a00cd31c898_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:6f0501fb8dc299f63157691c546d7bd64344e59be94af08ea41bd4649d6d6e63_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:c9c046884075e932766af8bc148e855c443fd01d8a9dcab5ea85560516381b21_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f31b0e06f38bbb9b519bcc2b931f43ef0f6d2ebe6c5d6d61273cb41eca8bb42a_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:1af158741a82a9644f483d1fd39e0373c6cc516d59ce9137d11bcfb1414e874a_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:7da9b5102cab0c431441fa67a4315d840144d3ad56da9c75cca00aa3fd3ef2b9_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8028b17900f298718d3b6e8db1e12c0ef60da93bb672e25231700a2acdb10fa0_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:d2e2ee49f78f0faed66a21ce03311e28b202e44dea7f080aff187f7d751fb0ee_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:25cdc35252cd4a72d32bbfc8f9a4e73515c2a0702692fbfeb740b83dfbb0e69e_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • +132 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)