RHSA-2026:77616HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.16.73 bug fix and security update

Published
October 15, 2026
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-55204 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-55204 — haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:53c4dba7ce0dafc337928bc6ae5f796580449ec67f8c39755e4438d18f72ce0e_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:6fc1917f1fb6c410edadfd768f08e447b331e89f44c9b080a04880f9a66edd9d_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:ac77e5309ad1eec9e5126724a30d930f8395aaa98e7f8d949187027571b078ea_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:e839b0ca26594df28524f3056b6f9d25b36bf241522d42fb0a87da6e64d4cef0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:2d6ace0a11ce0332f578958328a7b69a25efdd578bbaa3a81e673c5d5edb2fd8_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:38e09398ccd6444a74d66ca763ff85f36fa479d3b9693c4f4326daefccf1db27_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3da2175503afbedc91bb521fb00d855faf5e5b1d861483f93ff33d425a9bbed7_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:d76fa25ef1cdc0e1909949060d754a94c9dda7871a4b2d87ca8f25ee2bafa886_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:4291a943486f462bdabde3fd3593457aeb8b9c98109beaa8457b874ea997a7c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:a471305025963aff19e7c8553ca5617e01e9048787c8f3481600578f82dffabe_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:a94bdddcea3eb70ec22be54bf98a3b48bef50214912d6ea8ef12d21f5cce6ac6_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:e2a7b2d0f3658aff5d9830c857c875dd5afe7c31c7f9a95bfa5efa14dcdb99ab_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:4fb2526e0ceb9bc411782470d206410a2dddc92f6afa242a6517b482605c7c50_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:5efb8c31fe4078dd4eec59def8526a3dfdf69d80733ae3fdaf35ba9ce3fae9fb_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:ad28d2427838fb0e0e75f91153322cd430879cd4c3084fd07a139380b5cb9e96_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:f693192e8caf869ccf9fd3caf69cb5954abc40d52adfaced275a308e962894bb_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:6a2acc811feff0eee6ac17ec18ad94a6b9c3bfb987d60e16bbe681c0e2eeeedd_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:beffe7b68de1b8aba5c43748159ac3b0b2341751b9f73756471c24bda9cc086d_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:dd654817950d0bf88ae988eaf88acddced652f4d193727a8619ffce7bd90a457_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e8250f22ff658357c4963415db42369c012f9b8d8e27ab55ab09a0aa69942749_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:1268c8a5104929e88da9ca9e11d7cd883768a424670d8eb25cb3cd621700bac0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:16ee5a8ff427ca67d03b93c91544b87d632dd04bf16edf6e1bdb2744cbe39ead_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:335f2bbb672a6659013f461ae8d468fc04b82ba1a812c918741db499d0bb5f1c_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:336f9220cc3c2841dc896225c54e3d6ee049fde8f43674404a5dd16ae7cfeae0_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:1301bac0700ecf21909d343db34ce75560e7497c5bff37bddc28cad6b25360ef_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:2ae87ff08b9571ee7cd5c122abd14e47b9a315821e6ca9548a560e64562716d4_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:4c8993040da06095dd2c7d6254394b5bd063582ad7bcf378ba4810f84376f604_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:f1d2eb55ae51d3e3a6e3ef17edf47637c4fc52b77146622541fb3b62cb89ab3e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:4c44e49b48ed22c7f6980ab7cc07c584e82b03b645bdb9d88ce8da8675730204_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:61a278c8cb8332bb2a11f65fe8273f449b72d4a0a34301fe7fd931c60faa384d (For s390x architecture) The image digest is sha256:c837615bec7781929fbc4bc7c02364ae8b96b0eabe3aebfa03b66619673501ea (For ppc64le architecture) The image digest is sha256:41015bde33837e9eff78cece8d75bfc4d9bf5f39c9498cbd4cf265071af559be (For aarch64 architecture) The image digest is sha256:0967db9936ed8361872e6352b8d8c89021b1c7ef956ea4d6aef53d8d95969acf All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)