RHSA-2026:83480HighCVSS 7.7

Red Hat Security Advisory: OpenShift Container Platform 4.19.52 bug fix and security update

Published
October 21, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (5)

CVE-2026-33814 →CVE-2026-46597 →CVE-2026-75888 →CVE-2026-84292 →CVE-2026-93017 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-46597 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs CVE-2026-75888 — openshift/console: openshift/console: Authenticated SSRF via Helm chart URL fetch CVE-2026-84292 — fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization CVE-2026-93017 — insights-operator: gather ServiceAccount has cluster-wide Secret read plus nodes/proxy and cluster-reader

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:4a050c18cae4876f6909838277bb230a252ad04ae4e84126f34bde79a4f460bf_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:7dc45f93f8162599f3f8132e07840f1677328606392d81539a23f44662358ca2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:b40b31a84e39735a1cd226fd4c55924efefc7a5bedf4a5fc40eaf1da582ec919_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:fe1b23e74aa8ae6c81926f9d7262d04de9c40102f2cf820e59b2e44538b0384d_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:98c294c03ad0a5f80b990b7e89a43daa85ca1a645ee1f6c0507d4c9b505351b5_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:b5ee4948ac74688450b58f5301156f56075bc08ce71179595b54cccdfce57d35_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:bbdb40fe2c068ea396a3c0bc43f6c25ccd17c9eae57cb2ac2ed2c55d6c5a4566_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:e810ff82ca37adccba056387e8f10b86f4b7cbcc7489dcda7ccb085586110e53_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:2c18f21516b3a8112f28b41453c703b7e1e276874c40dd63ecf17da852402e68_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:6bd4a2295c18c6fe49e54bccff33ac116a20809c4e291bd279d59d1f8036edfa_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:79778bc0f0417ae9e2e8a67ee3160e528ce177bef0f8c865383377eafd00ff1e_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:99d40bdf13d202988fd63f23a14f94f9dfec5e8c5dcb0b50b7d7c34ca0ae66ba_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:7ab4fc5080868c0e832c745cb22cd470ae5339af61d0a7d9a8cf705ff02d3dc9_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:8ca40a3e73f0f0e018e9de52a01e5fab8dc7b85dff8c9c3f36698522827aa5db_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:c41eece67ba4513e838e3f05932f4e1fc22de3631fa5ebcfa55b22e75902598f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:cb2ff40d41ae4a86996e67928869b038733ce73bf3819a898227d52c961c66ec_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:0a53bb8ca912556f297fdfc0a5f7b72305e733786b175c5529894586e2be9ac9_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:5d3e6e6aebc8455d12d50d054836f0a7eeea06c9e935e2f8b78c204ab831c09f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:7cf4d0e5f8c7ae60361414878e6fb0656c563cd6c58b5093376fb473cc610327_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:c215b32d6696259394b7f292cedd5baf2de3d658f3fb9c138e6579e4cfd04beb_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:3f2099066cc536c7ef4681d031e3aa5fc36371f854f7d16c87770e8e2e823084_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:4827b9b5b9dedabd473c63d3d1e28bbce42ed100c95a49a192f8466dedd9fe1f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:8153a25e169e0ced5aa8b7b8b399ae0c62a11c358509c80eb85bc250d6dd75df_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:cfcc7d503e097c0aad01957935c4c5acb12829aa840966486e65155420bc122f_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:90882d16eb2f2a6509b2c33c6b026e655bde7bbb4bf5f2b6d56d664e04587b41_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:9dcb72daf6626f207944f4639acd050a66cd8581c54b8424e20e98f9eef2d8b1_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b4a886685cc9cf838ace04da8b20bc370a3e5f53d3dd03202052a73b094534d1_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e5f0799a016fe77525f88c5ae8273cc6218d70b5037081960812557955962ef8_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:53a0b5f931019da63f3125bb57ae208c1b363a7e4fef773bab513a102bca5782_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:acb954a5270202f5bc8aa69caa74021ffccf8caf0d468dcf509c3a7068944670 (For s390x architecture) The image digest is sha256:ff0a0a83d2a5f923955ac7652fb7a7e22a61542822ac6c7f1164028e9f27a13a (For ppc64le architecture) The image digest is sha256:091315cec32a3197ae53416ff9434630f8a5053d5b26206d778d6a2a1c758a7d (For aarch64 architecture) The image digest is sha256:dfa1aad4a2c37f0fc7403d395bda8c965d4997afcab6f5db820bab8442fa10bf All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)