RHSA-2026:83541HighCVSS 7.7

Red Hat Security Advisory: OpenShift Container Platform 4.22.19 bug fix and security update

Published
October 20, 2026
Last Modified
October 20, 2026

🔗 CVE IDs covered (3)

CVE-2026-33814 →CVE-2026-75888 →CVE-2026-84292 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-75888 — openshift/console: openshift/console: Authenticated SSRF via Helm chart URL fetch CVE-2026-84292 — fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:0e913e0b51ce62c9d08babb092133a047d2cf73e69aa6c33bef3bffb18757b29_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:326db8d4178ac41dab4404d54a332dfab7c2597d41d465ead9c0722831e7a4e7_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:8f294e5398a706101dcf43f6ff74c3bdd1683fb2786dddc3e11ea13550858cf6_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:d5d22dace8e2cbde7649dedb1435c8ebae4798bbce996c6afc17dde50bb4914b_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:559715bb3c8c66e9183e4c34dc05fa3eaaceddf94e483b329c56be333bc972e4_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:59470aecf9bb8bbd97ad9c44ddf246536df200a7f711148993ba9b1797d73aeb_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:962a077db9c9ab8879c54b117c528065df209203f8e08928adca83aefb250e59_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:db6a9086733e0d3c3e92f53c7a8e5f3ddfcc5d9a0bc3eb10f9002088190bb00c_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:6c41f8260eb4290312e32570526cac44219715ca6029757de518b5260ae9add4_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:91e5fddac46e00b0d6da2afe25b99590bcbf661291f1180f2229623c21ff6b6e_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:91ff329f4671965b973cb2eb90c44ba82afc22f43824f8d5d80004965c89bf26_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:f4ba7a802bdd133643f4059923350935ca45b9f99a33eec37df24554f6400449_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:026a4ad767ecca80f8734080be2fc98b781db060402ccbcf2367a394316f03d6_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:09cb5314d38714dcf77a7369b33b645ecdac72127761e9d8e8c874ab41c6cb7d_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:6a124f5e7ed257f626a8a53812c7a45badd509e44197c2ba47c940329a3688cc_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b41454c087e8761e489d6b0de124e32515717c0ccfbadd5dc49bde94739b1839_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:2336ddbca89e243bac8dd419fe34a2bba85e692dca82b406178e4673f8222804_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:51992582d946a9d0ee03d7c6c688001039193389323d1413ec0542dfb1de7e91_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:61694cfcdc748d84d2e3774ea34503b84981b9ae3738dcef9cb07cc0d44488fa_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:f54f43c2e7232e851c348d3d0ff90b37f63a4c9789011a56c85f19ec4c12abd4_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:286bc2cfbc6b7120f0682611f7abe6101569c63d7670f16bc7352c9d19ba24c7_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:3e4eb0558ce0b6609fc5866dd35644bb8585fecb7a4fe7805dae73119e52f56c_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:ca9b60ecc8fc0216b622bccf469ff4afe201aa578bbc5a96b08e738f1471bb31_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:d0e427ab54bafbdb6b79a1ffb279f6614737e9a9f5a4acb4a6476bd64d61f995_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:5e4574771dbedb6b3f5f2ae09038314e4d862239a618e06237ff3e30e22a3b3b_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:5ee9d1407a831ec7e423aabf52740354cd700ce330bc96ef541aa2ea0da50348_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:926c6f27535e9b77f2744b086eb1d08eedb419f734820cd30a0e1e769c783e3e_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:cab0e669cfa485537e9df3bcc2a3861720ba9e2b6217ad790cb284116c02cc96_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:03bd2515fdc1b8614b3141428fa6fabdef8b6418a30e4467ad6871a4f8b32eb6_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:c02df63adabc70ed309853f200a1e3cfd4ef38edf00fc2a3f832d5f99e8165eb (For s390x architecture) The image digest is sha256:d1a80d0385367620b593ac17e7de7bb6cf38ad2f77d8a91145585dd17b8aa9b3 (For ppc64le architecture) The image digest is sha256:2975ccd2f3da0b1416c81c6a075599287abaf58df563f2124deb5e657b484cbe (For aarch64 architecture) The image digest is sha256:a62f8b89a0352a4eea945b19b2c438bd680f914534ef29275b31e73da61e5615 All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)