RHSA-2026:71672HighCVSS 8.1

Red Hat Security Advisory: Red Hat build of MicroShift 4.22.16 security update

Published
September 29, 2026
Last Modified
October 5, 2026

🔗 CVE IDs covered (5)

CVE-2026-56853 →CVE-2026-56858 →CVE-2026-56860 →CVE-2026-56862 →CVE-2026-33818 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products28

  • Red Hat OpenShift Container Platform 4.22
  • microshift-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.src as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-ai-model-serving-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-ai-model-serving-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-cert-manager-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-cert-manager-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-cert-manager-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-gateway-api-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-gateway-api-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-gateway-api-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-greenboot-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-low-latency-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-multus-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-multus-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-multus-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-networking-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-networking-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-observability-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-olm-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-olm-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-olm-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-selinux-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-sriov-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-sriov-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.22
  • microshift-sriov-release-info-0:4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9.noarch as a component of Red Hat OpenShift Container Platform 4.22

✅ Remediation

For MicroShift 4.22, read the following documentation for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.22/html/red_hat_build_of_microshift_release_notes/index

🔗 References (8)