RHSA-2026:83542MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.19 security and extras update

Published
October 20, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-84375 →

📋 Description

CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

🎯 Affected products171

  • Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:475f06c4d8adfe2fdd62dbb797afc6d5d64890ff1a833b8715a0b99a1722a9f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:48c2c21aa98d557a900beb77b5314ee97852a5c32e76cea775caf3ec89af12b3_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:aab5327e038c16abede8de30d90862aabe9fa090010c0189a1f4efd6c7a481b0_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ce301307afc92932a41b9d18dceb40f7da5114f1283968e6f1645144834555de_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:0a3be973b585e683c275b90530d2d5f40d1a1d9458e6be3c5a2835453394c402_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:3f5384fb099ef6f0454ab2d11146816a8b3cb603170124ab37cec57d3fb2ca5f_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:52ab7f5bc835cf6fb2d8f0db0722c2cd83ae06a7b83b8786fb128172586e5580_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:a9981bf20307c73a60ae70f8d7eb4e6f2fc80a6e77f9adf8cdf0fc0e754e78ac_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1e85ca5b90d89e379abf4365a0545212eda58defbf55be1317f574841728dfce_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:d5123856a59a699be4dd67933627c8fa31371d1328059c8db7c9391d95c9ea18_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:dea8f4c4e2e5b2def524831e661da237e00735a95176a421c37a77b33f569865_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:fc86fb5b57c85437c3abe0059066ce51d929ff8a2c385298ec20e508be293018_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:3479441e15cae29c806c1701ff087c20db7824b5b1aa2e67de9093ed826d3934_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:de68248d20d202899fa551f4bb581321cb48d40f35aff808b06f2c2bb5b5accf_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e0f1f92d1da57e8ac6925a8dacf6689337b0fe23bf62c6be0f10d7224696cca3_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e1be9653b868b3d95f88edc92b937e376769de551725eb10ce673d28906d76f8_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:01d087ef566332274f95fc22a1485fc3facb4f7bc58b32ac19a242e8c28dcce9_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:7027bd5b1daf4c933ad203cdd45dadae78c8213c6ea4dd8f674e685833ac5d6f_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:9d8f7dacc01227a268372059193ba38adeab83e3090d462767e847b94cbcd3b9_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fb59c443c122579aa9f5f1bc196030fe2e85fdcfdfa3215ee2fcf113fc91e994_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:3aa7fb777418efe8cba5be8b7aa90ad2249124cc92063a1681fa4f955996f4d9_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:524cf3cb273ead6eab6126370c18138e04a9c85d277664cf06df9749a17cf41f_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:eae1ab5097f3ca51c20977dced2257397ded96e8f90acb708f35322b57cad2bf_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f1e4f5c38fbfe5b373157d99af930f7b281365c849c3d2d4093b1e7d770f57bc_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:205af64bd0d365b3efc517798362425d61a99a4cd256947ef0b05d2fabedc663_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:3698df9d1740893556bb294f9126d32e6c897cf108eef19944b65a0b666e14a9_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:43fe0356f7f5157cb9f060f5990f40bcb0e11f0e3caab84b1891d9ab6a9ab0ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:9eee1116cd587d9623d995f4dc346f1d70b867e976982312991941823a6c988c_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:0addfaaf3fe8ca42f8b380a1471431c557923a80cb185055fd535294c7227953_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • +141 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.

🔗 References (4)