Red Hat Security Advisory

RHSA-2026:79169

OpenShift Container Platform 4.19.51 bug fix and security update

Released 2026-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9, registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator +4

Fixes 2 records

TI-2026-26186 CVE-2026-33814

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

MEDIUM 40

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-05-07 Partial fix · 0.53.0, 1.25.10 +1 CWE-835

TI-2026-57692 CVE-2026-83589 · GHSA-8c7h-7vm9-jhj3

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

LOW 27

A flaw was found in oauth-proxy.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00384 Published 2026-10-01 Fixed in 1792974337, 1791837363 +7 CWE-601