RHSA-2026:73870HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.14.75 security and extras update

Published
October 8, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products159

  • Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:18682b5734a349dcb29f342a00b14fee5c62cf94152b40c53fc6c2cc2363fb66_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:a70cabefd353d99e75e6477b5788f968999fd8f3f3b1712ecd7b27c7f5c3dd30_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:c050bd7a6ad3300fbe84986f774f3fca0f7bb7246d8a249d91c2bf7c420d5029_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/frr-rhel9@sha256:0fa47455e1875095638e0d403c7515cc7c62ded8dceda052e2c54efb6c7a883b_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/frr-rhel9@sha256:3eb175cfc1a208058b4fb8aebca12008fa84a23773d97e87703dde3937a452c6_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/frr-rhel9@sha256:9a36a109788629085b4671856556041669b7ef59c4bc1b54541356f7ee51fa5e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/frr-rhel9@sha256:a4e32670b7237342c81728b47c6774e1c2803b237edb63b4a89ef61085306342_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:1411938f0260715c3e43dc3048cf5d0bf620452a3fb1d7717a1c5bf76d4c377c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:35d0fa2303fadaae729bcab51bd90d23b97d1dadf14ac1efb5d2040fd475b202_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7170e4e36ac4ebb8b203711cb13556770fe8579225cb63a7910209021ab80136_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:9b726b0b50db75d1f464be2aa6172944a95ff60d8c23383cfc4a5c59ae9aaa4b_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5b083f3e53eae2611526adb347b0f5b4a28d7fd296591925902f379e1d5495e5_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:660e8b78c84ad6a0ee25129cd63e6fbfc830e671ab139e4050ec5c388d568967_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:8ec10e1d00c7f4383d28c9d3181bb1186723d8f68ef95fad1b95eb21116af418_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:f2ac91166519459e055a66fd3d65cbb031a8870f8f7d8ff5b3b20e473b244234_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:16fb2c706df105f84d811eff2acac4318dc337c2ab08564cd6fc028cc59d8f48_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9950edbf65ead11c5f1f5e0097fa02f08b434686f393be2655406caedd2affb1_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c0486864726f4348ad8be9ffb5138fc2962ef559187246f4db988e6d1d137c1d_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c3372b8ce510ab9a993acd6a602c653393e857fbf867c4af5dc3945c501f1f6f_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:9461926c952bd51c5759d19df65ee9d963f1925d402b7395dc96b2354e596f1e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:ccefd271febd283e47569d11001e3075e00ee5e577d9881b96bfe9447eed6e33_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:e92372c2f399ffb28b14947ceb4036e92cdeb20242643ce60d57c5237b0c7013_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fa4d769e3ab3e014f9144f0e18ca420dd0eb9e0ce660f1cf0f64077827fe0e8d_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:86471ab7de52ad4d497c616cdeac812a3a85707c22684daa48529122a17da274_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:bb23680e54896e0dab5470c920b19fd43a40c103424ae10ab3f9a9a179bce2bc_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f4c6304686cf5ebfa7d6a57151f7a82dc0707f028dd565e4bd707921fec9db28_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f51b7fe841e31ec86468bac7145d7edfdfcd4a52b8c8bc27e736d154bc068b40_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:17387691f1b111396d750d223dd7f18bac0d57b2e5eca4a2b0687979c359a54e_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:4af44d440c63cc325c9de86f6039ac43a1b53c21a6047b8e8110d76e37ce7f2f_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • +129 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)