RHSA-2026:89342HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.44 security and extras update

Published
October 26, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (2)

CVE-2026-33814 →CVE-2026-102278 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

🎯 Affected products162

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:03a96d9f99c3f79e66dce41c1c0f1278116fd36f266d737fd9fa29028a655b91_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:8fd73103c5425fc1eaa6ad74a9c59efe9bea620aeec6f4965b34939f1d1559a9_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:98e42b8d4b97581aaddcf7d39bd9ffe08e0879459fab5537322a2902b0def05c_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d92982a9683563bb0134e56e920b271a2d3f274a5995b4b831346bc06b464c0a_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:a60294459b7c9a7cad6d704eaff72307a25399e13d3909140e386dc83d735af3_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b3ebfa6e932143ff83dbd3cb3a0cc0c72d2eedf35555b93ce743da2697100c2c_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:eb0320ae35de8ea0e3741dcaa43ed68dc0f17adda4e33f43fe43cdf26d49233d_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:f078a01087845832075238352bc8bd6f253daeddfb6b85f081289369c81d5df6_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:0bcf200576a37950d80679c4fa9ff16f7cf50dc4f5b90f743cc7f86d0b31633b_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:2991fbdc450823da588e6c1732372fdcc2573d18d4bd2bd4dc6b766b345e158a_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7d06f5914a72b0cd3846a6b42c94cad484b207cfcde1c9fdb7d543b025928961_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e2150f1d79a25db3c2235405d8d9a773648e35c8e2b57a437f58f39995494679_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:6dae4d94f01c7716778364da3dfdb7ccb9afd50cf4a8309e9b36e44792f8be18_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:6eaeaa8bfd51efa77e5480f317fa427e404123439cef4f311fe68d32798d9e5e_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:7fc2767fb642b5106ada332a61ec67ef53f8690d6d3989c961c36972b99a652f_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b30a32d35801b9b9a682f023eb6f55aab288ad44ccd21d73b80359aef4784a06_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:67b8605d818abf07387351815b448fdaeccf0b0527bd0200e25ee9571bb318b4_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:700653c0b7c1d7b0a17cfa4158e10a10e5616420239f7c04cccec75624e7becc_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:7a7214877c5b1b024227926f01be21cd77bc35ae054e88607085889565000198_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fdd56d9d86b42028ff1823b77ecfecb355896b61c39d340269939ecb843f4ef7_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:091d37b7e880bf558a64f61c987353f0e4d8140ea3d0e40501550767f548949d_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:68d5c0086318bb03aeb1f36859a0ad3551cefd4c74d2dc6a9a68ae2fb639741a_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:7d3baa12d36769bf13fa17bf7f2758f3a28837714c5266cd68cfd62d914c0a3d_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:d833bcd756f039527a93d5660f0cef48612f93f6c63f526eca35f4bdea6bd0eb_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:754357f5a896bb450334b0b43cfdcc3242cec2ce8dec095b522c9f1a23dd3c40_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8e7c6422c358c56ae66336be4c3a916bc89ea9bc885df788ed77efe49e9de430_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:b794fd72667a4c69fc4eb943d17ced60d6088e4c18dae6bb3930acbe3574840e_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:db55fd86584ae9110a38566f96954335fa0899014ceb5b2d821aa83be101e45d_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:0cb40432a0c61b9af1611a98970534c6d2cabd936a7d96e20429b6eb95979af4_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • +132 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)