RHSA-2026:79169HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.51 bug fix and security update

Published
October 15, 2026
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-83589 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-83589 — oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:050aa9c75a7a091da00283a0301a08229699aa5ee46fceeab072ec9312eeb502_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:2df9839844c5709197d0b940670c709805434945c0aff040e17615015f514b47_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:31ad68cdbce64501c62c25ac6e0635c779fae81f77601adf0762800619acb95f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:af8568b846802bafe8504405f57b0d34bdc49723033f10f4043a94f8458ae58d_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:3508d876a7d479cb757c638bdf0a1dfdc0a4e82923d96cf6d539cf8dcf6faa14_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:4c6b6d69c9e70429a9dcaaf8cf00a3e411ed4bb2edcf526d16b15bbe141bcb6a_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:7966f21dbebe51dbb8e43359fd6f0d82406b278bc3a7075f9faffa1147b77182_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:9fab271542fb5890c2452f528e8da94881a15a66905b84f47bf76635d4752ab1_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:50b4ef7fd215938a3f905636114011eb5ab50c0e2aa67156e91b5c858d32769c_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:7383e1eb93e753c5f335980fa2ea62eb43e9edba777d6fdc48d34abe6e8d5fea_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b5cba88f0a94836f43ba34b13f4c46557552b57b3a481d13da8caadd72e324ef_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b80d801264d8f581097aae00fc82616f8b152e25a999ef55a39346eac77e4cc3_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:21b71e9dced5151bf297170963ee5469720b722bbba7036580341e498ad55bd1_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:a2a7bd1ddd3c5131d7635fc7baf6f8bc370e105799e73b684ca18d1c19cf0960_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:c751299ad0573da17f130aaa8a6f6c239564996baa799fd857e804f3930ce620_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:d74f0187488d1dc166cf316638956e06ac72ffe12c44f77e63ad6a3d91600f6f_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:1ff940081ccb7efde68b3e4fb7c6ddbe3e509d23f4a1358416784c8c704c72d1_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:8612031bfe59d86f2f023d22748294aaddcf55827d6b31ac78dad62fc2fcd1a6_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:9ce890b8fd0debd95a4c038d6fa27de0562f92ec0dc279ac4b0a44c7bf2ca694_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:b632b84e979eaebdd910998f04e0342ca9aa3c20cb090769f77b760b09019e72_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:3c05b17ba3647180e7d6aa68ec9625f8d463b6bf780867f670fbb1ecbb586804_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:b193ec6504751853e404e64e282fdd11587ee4671f1d491616524ec2a04c4ef4_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:cf93c649825b9afd0e834290d8e7f3b79a5683774088e2e99b4ab5648825ba9b_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:e2d338cb5de2ce2ca69569704854826220369b54ace267f643c17c629f6a8a38_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:18a4bc0182aa48db04a2e853d8dab07d0dd6a810a611fa84e631607d0dfb4f17_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:8ac28ea8597bb5ee7f2eb445669c1d8ba693738849ce30703393ff3201c356b0_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:afd103d6d8764528c0488be1f972e1eed5290d9f03e8afda36a1f859c6b253e8_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e6b3134a7bf60f067b14c2da0d94fdabd7dd52f93cb2d432f5a4267a10e4960e_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:080efc1930163dd31569779be98a01e799b836dfd7f931057e41ac7ca66795fa_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:1d220f63f3655a5fccbec70e63a591933eb6d7b9f2c258a9e23101849a71d04a (For s390x architecture) The image digest is sha256:8651cea69ae627379a5f3337a6d64b2789cec702cc10c127c8278a61f7832201 (For ppc64le architecture) The image digest is sha256:94e59781f3f81d4c98c6c9e61b54b3543fceffc96618031aeeb4a2d64f90be4e (For aarch64 architecture) The image digest is sha256:3bc8ba3d2d4f5c8d2b2b3d8d111607623a101fd7bc5135a024a7eff21e235215 All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Red Hat has not identified any known mitigations for this issue. Customers are advised to apply the available security update when released.

🔗 References (5)