RHSA-2026:92330HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.21 bug fix and security update

Published
November 3, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-33814 →

📋 Description

CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:6b21a280b14b0abd7f6978cdc59eef4f95903a9f2921da9c613693c26db715e2_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:82484b76d989e3ed00b2bc642d7a03c02a698e436deda09b6dceb1719be40384_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:99ed8fae0d03b5ea949375439a86509eff42d6785fe2bf8cc12694a60491490f_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:df6ad6211de69191a7677c6b552935bd759163810c5b61af9784f0efbe288aa1_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1e4de75e060bfd732e2127328af7b3b9bec5a7ca2225b0eb97aa6a0f56088793_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:844c0ef2877198e3aec0de725514a20705ffad38c23f530b52a1822bfdf243da_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:c4653043ebe4d1f9fba88c3a749cb12098bba61b9acae5c2f21231dbb7ab85fb_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:ccbf41abc3e0cbd2f7cd57eccd47bff33848baf3acd537a486ba809030a41c91_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:07e0d9dc5cd01f7cd77c89bf358838af2ef1ec3d0d1cec2c2bee59cdfbad956e_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:3a8bcfdcd4e072693710f6f735172db7f3ae9a189aa2cb97d095721654a5a5d1_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:475dcc28fabeb80da62bf1a359ac5fdec1c47215b568d27fc4b16d41f979c9ec_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/aws-node-termination-handler-rhel9@sha256:d1c60d6585790c983da5dd741889d7e53ecb8ea773e1a93a7646b74898575797_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:2054002d39448dbb7bd1303f7ab457e1b0318160f1b56ba8e98d0ff46b35079e_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:2f8547a6b8872e587e716c1341574ec1926e5173acf7165e002f218d6f375744_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:5c9d16ade30e0e61a73f30b1effcde612be00424779475617c2563e2bf335d09_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f3b81938c2d3b1e868559344cae76a1cdacce20ecc51a19189341529d42f9b0b_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:9f51ed84365fa597ccb2d9f0df3fe735f34333cf564eb119e1902757668484d7_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:c9d81e34f764e080138ed78c05e953fbecdbd18cab8d70258f530303ec82b74a_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:d7d05c01584f784f2a27f4f9cb1a91a4c182b335d2431ca135f439d8c43a0f42_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:e0b50c653db23e8a32a11ca14398cf04ac7bc1ab4a3a48dd0618a9603ad7974e_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:835bc28dd96f3289fdce004c9980129bad4e02959a9d6376f04d402db395ac73_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:83a7634dc90a7e8adf8dfb9ea7fd0777019a60984bc8abd667ce5ed23157a87d_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:8c3ac203a150d0c70c04868a5c68a492daecc704a9616302c82315cc1df3adf7_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:fcf60befc42ff767e9910bd278acd8efb58e7a57b61269b7f1863b9ece7323d1_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:37ff3bdd4890fb02726e9595f8781a0310c66eb16fa042fab9d7f48abc0dface_arm64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:5c7536ce1d877aef7a174f0004f561f3150680a6bd7679eb5715f3204e1b090e_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:a1dbd1100d170be536d7ca90e5e487ef108c0e2b9225cc014d759661934cc3d4_s390x as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:e5692e80a38f1cc7c4203e086d51dd3bfb9c8a892a70fa227dcd7317b37d654b_amd64 as a component of Red Hat OpenShift Container Platform 4.22
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:29f1ba05e841caffd602ee5dc9133afeb6e69b67c92d42aad4d51160591d6dc0_ppc64le as a component of Red Hat OpenShift Container Platform 4.22
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:828fa71fe839d280cd731271d04917c5a5ca7f7ce49dd68e3eb1a5d37f9f7f02 (For s390x architecture) The image digest is sha256:499e44ad905ed81fb9e35fccb4b2bea2caa06adec6bf7b80a1df3212fab124ad (For ppc64le architecture) The image digest is sha256:08014341787e73f27d6c2faf6ab1f9cda718a685072880955b4cf7c8396b815b (For aarch64 architecture) The image digest is sha256:8a2998cbb3fae1d06401582d7d07d0a581c0258d88efa7f6382a22ae1a9d304d All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)