RHSA-2026:89656HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.53 security and extras update

Published
October 26, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (3)

CVE-2026-33814 →CVE-2026-46597 →CVE-2026-102278 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-46597 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

🎯 Affected products170

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:1b2b32e2edd1b9f7a4081766c7baa716b1fc9cb572cd689d66e70b3b0916b24e_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2a764c400b49488b8bf09f56d20290bf496fc3074b6fbac9405d6fbf9a4ee4ce_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d4eebb61758e3a8270f463cb001e7343d0453845e707f4156d6c071aca780328_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ffba5db03b860d555acf18eedd7cf4f71858d011ebea33f6fb1fcaceb22c8322_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:1baa690dc6ac90abf1b989b233bf160b010a7e1c221eabf1e03103e73daa792c_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:4bdb3aee07bd67bc0549fe244f6a3eca624d88ddb616992c07b15b41c8e97cb7_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:5a7813d5bfd81f0a5464a7b14cd53abf9cd0a9da240a31c5bc89523d9fc37d4f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:c2ec4431b70e274a2a3f973f27fbe1e088dc572c0fd6ad6667dae428d483c162_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4dc1cd65c168ffa5bd2a522595c10dbba19256804360839ff083d3c2982bd8ed_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:91655af31f8a812e31977b84acbde0cb9061d7ca75794d99fb409d6ed22384a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:b33b6de495712a3eb9f9c8f2137292ba317ab0b8d500577b6de5c4868fa72025_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:d0dadbaf9187fd9daa51333d4ffc4dfe316590a6d706848a43767ce6ed95a22c_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4ad7e31154b5a63ba708306191be007ad66b415c601452e50ac95a5918e86cb6_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:59f45a95418d64e3748642a12c8be0c6a27a9d2946ae6cfe51763a78d2dde516_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:7a387a8bd1132648982f54b70519bf70b6152397faff46b173c05661f13797be_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:fc35267fd653b84b52e92c9bfec3a4449bca310419571c8e8ef72537184d0f9b_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:03edcbbaeceeb3cecca5b47be8d876028d6de652c3326a3753a35ac6e3937c3e_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:080f5b5b9d4a8810435ebe4952255ce720320b3cd643c47a78f6767e6eba4d43_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:7d89a4b28daf91a673643f66da65f940f278bcb869c0646c7731eb0e0978cf53_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b1da47895daeae5b194d4f8fe977de7b6e99cf38fdc2173137aaf18334b31df7_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:4fc76c12ceac867dff60aaf33655fa16f16dc3580cff5a00fa8b92be768e2c42_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:5c455b5d1808cd17f75683fcf6837d5333d3b877d4a7286586cfb331b1da7010_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:eeb06c97996e09318ca992acd6db599809a0dae3e1d6fd629ff3d517e242b6f7_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f85607a1f77175c3eafadc1971438dde886602f4abeecf36c45bbc96348bb78f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:776c3cdfd80d09905462cf6ec9d2212a9710693baed56b94df5687428290cad3_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:790eec55c8e48609414dd9ac82aad37219bd0843c3e1b9ea1344d4471aeb26bf_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:956b129023670c0929b1d082d285d4ed3a3d3c60a4ccdec2d3ee12c34abafd7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c652b85edb4b540e934ad135fd41355e1c38ee9c35b1324bb5d23512ca5574a6_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:1a378b5cfb54e9ffd974e97d1c5568fb9c9122bcda046c2eea7e455133cff4f6_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • +140 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)