RHSA-2026:89727HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.18.59 security and extras update

Published
October 27, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-46597 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-46597 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:233d4e3bc5faf4687546cd425c79d2db4711f2011009f51bc25dfb326cbe0c80_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2ae4b26ad0b99a5d9a94db9685a15e286f22a19e05ce9ed2b995462800bef78d_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5256db8d711f19bb71f4f1cca76762d7a5de27fa74c9b391bc7346ec248573d6_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d671a98e6a6c3ffc18c59f0a38fc886360b9b9b4a141c36287e54564b2083e07_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:19b786729ef44428f5c9e6aea86b079ba4615d8348b2f62814eaf85278685d52_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:37f26519870178589856ff969f1d8bb430e6804f4f30a1c8b56132baa70937c3_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5e9808ae7c9e98dbdcc56a22eb83c8523366a67693e2a7a42579dbd82c3bc1d8_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b8b1efcceb9cbb69ba25fba6913336990aeeada45b31530a95f0214319de30d6_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:ae046b0dc76b7ebeeae492c847a0f5c070a42f058e5919752e860a0df14f6310_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:b40509a88632cb24c430d75fbab21391a0a9c0cc2b4b57b80db79c462250dc94_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:ea888172f39294ed26bbd044bd97b9b1e0cb095730093d9b573d6a56ccb11264_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:f95abc07ef6e871e990e2d6809f6a18fe0661dd3bcd7f0e438dbd7104d3afdf7_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:213b5e0e790137e98a7dd9aa2341a9825436d368a40b1d8a6f9dc9a29c6e13aa_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:2880e4fe58ef24aeee540f97d9caeaad2a2517564fa579b0d91a067aa0d70bff_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:8bc114e7ce62e8d1f48b331e68eaebdb9592d892055e4c24e655c4786d7c0353_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:bfbfbc332a038b360443ecc16ecdfbc7d49d4121677a5b157c2abb5115afdd4f_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:3e95e3da8e661c2d4c1362b3dc5884fc5aa243579771d3bd1b8e5ac1b1370f0d_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:427011043043211e5479b4f7d118d1a39aea3bb92b94bacc899f00f09cad3a73_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:bfc710feecfa51a43d53e5348fc76528b41916d769b716b4b9719ca0812bfeba_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:d84ea466f1a52c56d055bec4e4f03de25ea270a3606e79f86606640940b98625_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:158eb4734039e72a8af3864f328abcbec7136cc12c3feec5a1e70cd64facffac_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:7de8a44e317fa23ae727b6452bb512c6ffc3734f1650690882d4631114f7fa63_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:98ad57417a7813aa0774b16665c920378f2de496efc5dd9532c3f722bb376f66_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:e817ab210da034d8d0b4cb5fcb3471b3bdca21d45292fe889d3686557bb61bce_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:080d177f6bd59465c33378e4ecaa93936f3470d8416b505bf516fc1f97a3b00d_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8d44d5aef1023ae4aef889e389aec129d2cfab7521307ce3e5b1cf933d3fa0c8_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c5600f164992cac10de4e52fcb9377db794090ec805a9213bb6d7471a11fc03b_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:fd60f8fdf3dd30bda785220692e15fdb33bb3bed9eea6cedf21b732cbd239bf8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:61893d0eb60f91182416199f51eeba28a185d7e54cf4d1981c07a9b6dcbd747c_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • +162 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)