RHSA-2026:83481HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.52 security and extras update

Published
October 21, 2026
Last Modified
October 23, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-84375 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

🎯 Affected products170

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2011d0c9fdca8f9edbd1c7d06e4374b75838492791c5d8cb479f687493fa6a17_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:41c196107ed286fd2babba623ab28f32acc3978babb07ba83c552d856612d277_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5159c80e9afa7cd4abeb8b448a4227c2230f8692fb6e2dd56c73867e9636d9b3_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b9c20dfc11e414c46f30ab04aeaf75f9d72e9ddf5336ca406bfd2e49f24dd110_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:4cc91a4fee1dbc31788927580a887c0dd37d6f66eaf4f468876347b49e231ede_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5c24ee3e0415b22f5ea416fbc3d08c80520c20b361fbfbde33c8d1f81fbaf90f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:6f7a55140401f049b9f40fe88fa73e09c00e220928bdc8aa0de7a96517f710ea_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d9d1a9504eed8cd09fe30d561cac4424eed463333038b8f0f7baa1c72b338478_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4458f7e8a3af33f87203c022a1756263d40ef76b843e214eff6c430e342060da_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:48c1646ed9706e5222f90cde9329f1e9de7e34f998abd3573464b42b4dc0d744_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:6201412cb7806231ff134fe294d190991a22506b8397f584997a5a01b83a13ce_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:fd8b08b4c6fdbb887f22a4e79280f0794d90dd3a53dd0040a0282aa9476ce1e6_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:1462d1bd82f0d559a575b62fc1183820d662daa2c7057a470fb1e926e31f4772_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:27c33b087e797bc2aba28041a9370da50435a95ea0c91c707c53a43a0b75d7b3_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:361a092e4ca38b2004126d45e80de7765f6e09b2c6af5685cd257abd75aaa7a3_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4557391f19cc91b6422d20e870c7f8cd919bee04272302aa187abd34337bd09d_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:066be1afbb9b2c14acfce738257934d2844eed2c65a65c8340c483dcf9a1142d_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2bc591d582d3f647934f2b3689457c72670f483d006bb8daa9d153789d02450f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:7b274b9000fb66d885531cf1ac7b17d76dc12c7265da9af6b55a0a90590dbded_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:837219d028bf06d77038ffe998c89545e7cad718314d69fa17c24bee094803cc_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:6cf841505b4b4c041e3944a34a59c98f95dd03d37416cdb2d7f1735236f41c2f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:c35f7a20ea2d2a29cc02a049e834dd9bf6c0579e6d5e3ba4f834b45a6402729f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:dbcc8ccaed597351cac89b15200aaf5d220273bcbb38037be7d36a466efae704_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f341791f3189f643cd2a11a858928b9510863ac9504e8e7fd7f2125d7e8047e5_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:05d7160b277544bb4a710f52756a1e3d577185b6a4a0688d8fdf10b980ff04df_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0ee85c2515b5d5f3442aae7f087942dfbbfe5db819334e3a488305a29c70379c_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:7749d6518895761884a0bd5a8d93c3ad064a905e2da2d51cfe65933e418a1ae2_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dc096b10b5f49ac58457b28954c5d27fdfa7316d9039b1db7661e89ad11ef713_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:2da5b0d3b934d26ef6859ab2b324b7d15e014a6620ab9f0e781704c497cb3acf_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • +140 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)