Red Hat Security AdvisoryRHSA-2026:89199
OpenShift Container Platform 4.22.20 security and extras update
Released 2026-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator
Fixes 3 records
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0084 · Published 2026-05-07 · Partial fix · 0.53.0, 1.25.10 +1 CWE-835
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2026-09-28 · Partial fix · 5.0.11, 3.0.8 +2 CWE-400
Priority LOW 24
Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause r…
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00443 · Published 2026-09-04 · Partial fix CWE-283
