RHSA-2026:79040HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.18.57 security and extras update

Published
October 15, 2026
Last Modified
October 20, 2026

🔗 CVE IDs covered (4)

CVE-2026-84375 →CVE-2026-84394 →CVE-2026-33814 →CVE-2026-84292 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-84292 — fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing CVE-2026-84394 — fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:12850b04bddf07dff02aaba1747e13214ec6b2b3db77efe73ead76cf5726af16_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:320e487b479bd40b80a2eaaa9015adc5a1b1c41524a01ebd94f0d54fbe2bbab1_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:4488d6cd916536bf58d1eb3a356772172790487a12f00b9eb2454353e00c40f0_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:8f0e38c5eefe61ebb2a82210095dbae44777354c792994e90b54f8594196e672_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:25c11a83ab9bd9116fe13c94db2fa61b95abd2f98cb95845e996dd14c2195b74_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:68f8efe90959ef181a5419e4c34e244b3c9e0b559e8334a2c5acdbb49ddc2ca2_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:9c0793a2f77235170d99be666b5e95b001a86d08b1a9543179b4556626b1cd79_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:cab299b2b364f638b32d0f6504d8e429624b936f57fb457d4107694e167c29aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4261b985cc034eea4b13919e14b2a0c966a4e2cd0f6ff4e2a693170d205fad2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:6a81f77f04eb4d2fa52190fe4f64e11a1c15652690b74f8413a30f666dc94bf8_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:ba94f297405a3d2954f4cee16b653c19093e4c94cec40bd6df6466a4e96a6ea5_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:fc4bd0a539715a6304e57f673a212d9e68127bf7ac6b1390b3619d5b44cb9168_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:5b68617a6c89871ffde7955e29cf7db527ec920be4ba6983018bab453b3e10b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:7c617559038d79c093e3918de2872494bb7bb5f8141c836eda680f4889570a1c_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c134f0117faf67bef70166f0238cd72769e2644d85a5e7838367b742b1d1b391_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c142f6e367eb53573a8dbfc1f94029330090845f5968208297192d700b0fbbf2_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:16ce46ea0c49f22e17019fbff52ce1b3dc6296f1e461189540b5b5cf1c59f95f_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a9d76465c71c436f27cc95bcf948f57c4a3e147adfa5f100a96717824336c13b_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:ce5a5608e79765b0b1e5b31aad6aab6fd4b0e52bce49b0accd4cb2c6698231ba_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:e1f50c8280270b1784bfabc103754f8d0df5501e1d032d11b8e75fbb8486fb23_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:0f5c0ddcd11e50f80af3a50ca5d7970b4e2c7ab6432e4dab112e725e2da0cdf1_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:905500325a5ff5f8ea2286b8e105679835f49d81fd171463f5ba1bf30c0c3f53_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:9b7983347bc12463d507a2ab09a6c1d32bfb186652a40cfd2234b38bd1337de1_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:b769c19fde94dc3a391634731d8ecaaec30f8f664523c8eb32a0753ab6b537ef_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:45c001822d4415f3d4e67d735cd17eaf2754d2ae1cda1f409af9e2df9e1dec03_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:7294f88abeee0983c67357eff2970c783568e330c730fb4fa1ba0fcb985b6d19_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8ca1d2a7f2cbb5d200c047e902ecec9e73a96a9e9e9c840c1f069c25902a0916_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:a81c378140ab1894b884aaf93bf6b23b2cd711de79d27d2f5b4abac89ae18d47_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:0d998675bf331c74f2b65146ee2c3f7ee0d4359d166821150e3a1e9e16b5ce73_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • +162 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)