RHSA-2026:92281HighCVSS 7.8

Red Hat Security Advisory: OpenShift Container Platform 4.19.54 security and extras update

Published
November 4, 2026
Last Modified
November 13, 2026

🔗 CVE IDs covered (4)

CVE-2026-44432 →CVE-2026-11332 →CVE-2026-33814 →CVE-2026-44431 →

📋 Description

CVE-2026-11332 — ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

🎯 Affected products170

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:4b72a8ad809b7c8c3f61b9f10c41a195aa9342cbe459936b9ef74d99619c9efd_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:6edd4cba4280d13f2c8389774db860d149505a8181de14e10d84a36b660f9666_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7c6f6a40c657c3edb303ba2abaf2fa45b3e00cd0610cf5780e43bba676d53343_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b4917daa9631c8602a8b57260178bd86d8c52f5b0286729d7abd76e4330a0edc_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:042ca34b7595faa12e5ab5b021f365cbb6198446afdbf5d9f680c31a629a2cd1_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5d0b8b556bb36cf16a2f223bf75dd03bbaa6f110d628ac183f73e6a7789b50c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:9b2b83d717d1257247575399bab06463a7087b0bf3ef2df86e40f68be50b0138_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b4d43998d11cbe347136a16e3fb13f8960f5e238d6fa03dbb1d3724813c427a3_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1668e20c29e623e7fa2af86d122b84f16dd4ff8db985348894d92a11b51b4334_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:24b131dfc3fa85ffe60ebda4e838200a3105241a7abbe70690f8f719a3126aa7_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:51c3b2b38e1fc0f2dd822281b9579a80daf0706b7278485b24f09633fb0cb1f9_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:f4ddd4fd3ef94c8cc2a695247823bde89238ead564519aa3f924f31e21bfc3cf_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:0851129ad3b7fb63d9a67f168dc505ff4ef03c7cadb13ecd3e882e804a0d6e44_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:452ac84d4c6aaa71cae805e9e10f2f3edba8a59112ed6ab77c9789ed733cb9cf_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4ffa01f44abcd386f8306795d5deb3c1755e58e03a12f392e3919cdf129dc0f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:80fd243d04f0687b7d54e986cfba6bab4c2800247f938fc39961003232ddb2cb_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:08195a588f294e386bc4de91f1bb06e3c589b4f53d5a1cc5ffd7ebc28ec0e909_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a8f334bd47cf520a7ec7786f5e601e16322c5184ffc022398ba773fc0531b152_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:d60328c03682ab680c5fd32a4411da73a6e9e820d5628d52135fb532f07ddcd2_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:da4f5968047dc0068372ce38c4f1291e31427fab2b0222dd29c50b5884946050_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:3150bdb674e0be1e0f290ccf5ca63d38abe0302cf6c7cc4920349cf317b6042e_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:5bdc03ff04d81e3915153361bbb5d445f396126c5f0632c7e6463cd7d417adb2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:a169cb37f09da5fd21284340807652f61343a0a252a08d4852391ddf6cca6761_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:e6af4ea60920c52192637dd476979b06339748cd7fe8dbafcf8166dcb78d01f0_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:04df8afc8b823c8986818e088cf2c1467de672ccfc4f2dd325f5c27cd8f3a2ad_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:4a07a4db3d14fc7a80420a131024f6c5f29b2226aebd49be28cc17c7df696ef9_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afbb6c6a6589492211e9fa7e2171de0e4b2cb1aadd263fc80c5a609e944a7a88_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:b38721c1ba988ca873bb8d43a8b68cdbfd52fbee5a8d3c3c9d0e9392f9cce75f_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:1f026b00933f46beb9a9ba7566adc284e96138344965b0ab38225f79732f7ca6_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • +140 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)