RHSA-2026:92284HighCVSS 7.8

Red Hat Security Advisory: OpenShift Container Platform 4.20.45 security and extras update

Published
November 3, 2026
Last Modified
November 11, 2026

🔗 CVE IDs covered (4)

CVE-2026-33814 →CVE-2026-44431 →CVE-2026-44432 →CVE-2026-11332 →

📋 Description

CVE-2026-11332 — ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

🎯 Affected products162

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:12f12888a8e91ac3c8d2ccef9a877d3e908e636dc0867bee698f4d9257c327a4_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7016c7ef8eee040f6d1bae72def7e2928ec0e4e89fe44e247da8e525adefb794_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:9e70e86181c421bb8d47b99c321e59d419dc908474232d9a91b7aeb9304083a6_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:cf5412a4c9079e23978615243c9ed4e6ab7ffbbf9540341ea0175bc9c1fb95cd_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:3d1d25fa87c0fe8c29f70a0411c2ef13aafc191889facc3b24044e865baa98c8_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:479ef7a5f6a2bae7024a4863c62d5e4112892a7291115dbec3d14191ff6c7204_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:717f7b0371dca1bea41b90f2b6015b2ac60afa84e421fa5a1a7f0c144b240989_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:a925362438acb3262f597fb463888a2fd6fee45a717aa7ae7d3e65e64027655d_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1b93a956bce3303d2ae8f4817314d07c35807e78bf0a637815cf6d3b452ee3d8_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:3af8bcb8d8dc279c694c57ffae672b039d43b21b05a1790953b3e0c9b54163a2_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:52f2ef0810904a8686c73be874c3e7c4adfde20a776884017195c0f3b835134f_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:b8bb6030a5a2c22e9d6cb7e3b40aaa56db2f54c543901637e39191bb6bbf3209_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:31baafa2def33e38c2224998599ba627329f82a3f11c39459a7542cc30014699_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:5f5ec6f0623d0fc6470e40f0f351c5a0c5b97cb2314b89b5d5836b3dabe16a58_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:b5f9fc454e1ea6f4c2f5840c82e63bf2a58ec7c0cf317ab981e82ab94d44bbef_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:db127f34ae1dd6c64fde08c9d5f171faa1ffe06b4c7fe558088139cae2883968_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:7705169906515a44fb974a030c724c1f201997d264614ea152bf8ffed71a4a0f_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:eb4d837bf6ca131d4461e3ac5c00ac42890d7012ebc9e4b03588be7293a982d1_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fa3f7eeedb6c1c3363c8db63cd47e1c76475efd7c2c81f24401dce4c3601e4be_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:fa50caa1c9310e3dd407196edb7ae6c1898b4ac3245304daecad2a807df1402d_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:027d32253c4001e5b6030a28cce35c679e5bb3bc90e689c7470d90d485e972f4_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:378d3ec757ed8f680609474866e0f10ff9284de4e542e0f8e834a8382a2abc4b_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:84ebe9dbd955f6e52c1da21825b2d1710d90f93d8772a6ad1876a6570bea5dd7_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:dd6ccb47c93ca8447e4dac7e0e266ca9cf2fa65bf20052d0057bd62ac7ab6b24_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:39d3a30b329d8dc8e626b06a01c51f1e425af807a588f85873de85f804b07f20_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:64f159bc2b95b4b0fd051556a72f3d80e63c191d3ebf394422acbff76a30ece1_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:6df7e6424870af337b9853cf1e9823f116211304bc5fbcef54b6ea6f196fc958_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:b43c450a2e1c3cc8a10f2c6e204acb6cc8e5f2c69e4b8b7a2af27f0c4d57cd87_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:490db577925671d7e01ff1f85e722bc7896c70cab7955d89b0c2e495eae85693_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • +132 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)