Red Hat Product Errata RHBA-2026:68535 - Bug Fix Advisory
Issued:
2026-09-22
Updated:
2026-09-22

RHBA-2026:68535 - Bug Fix Advisory

Synopsis

OpenShift Container Platform 4.20.39 packages update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 4.20.39 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.20.39. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2026:68541

All OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at

https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.

Solution

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/

Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.

Affected Products

  • Red Hat OpenShift Container Platform 4.20 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.20 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.20 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.20 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 8 aarch64

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 4.20 for RHEL 9

SRPM
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.src.rpm SHA-256: 880be4797b79e2e6e7f8cde494db19ca9de63e03d3835d5d97db7ea46d5c3035
haproxy-2.8.10-3.rhaos4.20.el9.src.rpm SHA-256: 75cbe193ece8eb23d94d2a257bc46a75abfefa6ed7e2d9751cb6c4c844bddf92
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.src.rpm SHA-256: 66df7fc7fe58c2ea0993ae9d48f9103c7bfee98a570feb6db8220add77106a38
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.src.rpm SHA-256: f6a84b94359485e8068b0e6036a866a1212d2e85f6b8e9ab98eb018bba93dc00
x86_64
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.x86_64.rpm SHA-256: 41254c84aceb0879ad470d997a14b3b8118f169c2ba092e64b994fc8f49ecd59
cri-o-debuginfo-1.33.13-7.rhaos4.20.gitd6a41c4.el9.x86_64.rpm SHA-256: c401b5aa991298b83f6367f41f96493722f58cabfd56d73bedead84b469b4b6e
cri-o-debugsource-1.33.13-7.rhaos4.20.gitd6a41c4.el9.x86_64.rpm SHA-256: 23e60d898d3a326eec30af3fac7bd09925a448c572207bb4fe1bc35277291045
haproxy-debugsource-2.8.10-3.rhaos4.20.el9.x86_64.rpm SHA-256: 6ed1983023a31903e36a0df029df6c728fc7fb97febfb47c5a68e0cf191a6e89
haproxy28-2.8.10-3.rhaos4.20.el9.x86_64.rpm SHA-256: 7b5b231052f7c02e003da5d508be3ea4d5630fd8365bf38f830dd83295c89baa
haproxy28-debuginfo-2.8.10-3.rhaos4.20.el9.x86_64.rpm SHA-256: 01ce51bcafceaa0c4f82e84b34258518444d2396e4122d8d29629dfe15bbf93b
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.x86_64.rpm SHA-256: 8aa8165c21e4bc416b06b1f4404b9e9bcb98fd321bf4f9e2b89aceb7bfbdcc3e
openshift-clients-redistributable-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.x86_64.rpm SHA-256: c3a534eb8d03d54e610a05dcc77127ded9218f53f448bba22a26495762a610af
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.x86_64.rpm SHA-256: 230d073d456e1387ef53f718c6a8676f5cdfa1f34d8fa53a3d7cb8d14d7f528e

Red Hat OpenShift Container Platform 4.20 for RHEL 8

SRPM
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.src.rpm SHA-256: 33ee051dcff1364edf9c39f71bdd2e1d22f547c1d1b7e3e2c5e5ff987b76722a
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.src.rpm SHA-256: 54f2cd69bc0c533e945e00703c3dc0878506ff0ac64944ff068ff6c41ccb0a52
x86_64
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.x86_64.rpm SHA-256: a3ae6b605d553f2e1bd2e92c4fe10205ea072a93672b4831a6201dc0e7df21aa
openshift-clients-redistributable-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.x86_64.rpm SHA-256: cd021654c00d644a96f6b9cbb9edb5b0a68e0916691fc353e7bd93ca39bcf70d
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.x86_64.rpm SHA-256: 75b56751078a7cd55b6845f1df9e59c9b9ed5b9e8200400fcd61a5ccb09baa8f

Red Hat OpenShift Container Platform for Power 4.20 for RHEL 9

SRPM
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.src.rpm SHA-256: 880be4797b79e2e6e7f8cde494db19ca9de63e03d3835d5d97db7ea46d5c3035
haproxy-2.8.10-3.rhaos4.20.el9.src.rpm SHA-256: 75cbe193ece8eb23d94d2a257bc46a75abfefa6ed7e2d9751cb6c4c844bddf92
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.src.rpm SHA-256: 66df7fc7fe58c2ea0993ae9d48f9103c7bfee98a570feb6db8220add77106a38
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.src.rpm SHA-256: f6a84b94359485e8068b0e6036a866a1212d2e85f6b8e9ab98eb018bba93dc00
ppc64le
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.ppc64le.rpm SHA-256: 66cdc44184b4d4f23fe4dc20f3278028c71647848a4ef601e464303247571ca8
cri-o-debuginfo-1.33.13-7.rhaos4.20.gitd6a41c4.el9.ppc64le.rpm SHA-256: 4299d8a2d7dc761a9b94fe8867f575bbcabcc8219fb73ce319fe8446233f0b3e
cri-o-debugsource-1.33.13-7.rhaos4.20.gitd6a41c4.el9.ppc64le.rpm SHA-256: bb551da1d97c22dcc8f39d9bdf5d8b65fbc2102b7c96fdb9ee5f363841e1a3bb
haproxy-debugsource-2.8.10-3.rhaos4.20.el9.ppc64le.rpm SHA-256: be3e13f393ce14cadde0cfd2ddac465d758efe91f3f659a7b7b9a2272c99a04b
haproxy28-2.8.10-3.rhaos4.20.el9.ppc64le.rpm SHA-256: 3ce2ad39ebe81aab0c61be9d92de2b705f3004ac94e988529198b5fe40be0c35
haproxy28-debuginfo-2.8.10-3.rhaos4.20.el9.ppc64le.rpm SHA-256: 001137ec7ddf9dd7c4ec3beb6b424fb3c5e8430f44a3abfc9630ad5afb4807fe
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.ppc64le.rpm SHA-256: 6d90bf07dc08199c804496d976a699e8963409887a7495520b0c41bd331e18fc
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.ppc64le.rpm SHA-256: b07515892a091f6b4e0d630e786518c13d403c7049366443c384c98dc59aa8f7

Red Hat OpenShift Container Platform for Power 4.20 for RHEL 8

SRPM
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.src.rpm SHA-256: 33ee051dcff1364edf9c39f71bdd2e1d22f547c1d1b7e3e2c5e5ff987b76722a
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.src.rpm SHA-256: 54f2cd69bc0c533e945e00703c3dc0878506ff0ac64944ff068ff6c41ccb0a52
ppc64le
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.ppc64le.rpm SHA-256: 6b56e03b84a5131358e38894582bbd82aa3b2ba9a3e44b9ef30daeccc87b30cc
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.ppc64le.rpm SHA-256: e0b04e6e629df6cf44a2779d5d8b4fbb2780e23254a217c8c540a2b5797ee518

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 9

SRPM
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.src.rpm SHA-256: 880be4797b79e2e6e7f8cde494db19ca9de63e03d3835d5d97db7ea46d5c3035
haproxy-2.8.10-3.rhaos4.20.el9.src.rpm SHA-256: 75cbe193ece8eb23d94d2a257bc46a75abfefa6ed7e2d9751cb6c4c844bddf92
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.src.rpm SHA-256: 66df7fc7fe58c2ea0993ae9d48f9103c7bfee98a570feb6db8220add77106a38
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.src.rpm SHA-256: f6a84b94359485e8068b0e6036a866a1212d2e85f6b8e9ab98eb018bba93dc00
s390x
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.s390x.rpm SHA-256: f70dea53d40ee56f9ace491a86af444b2d3d2204fcbd1a1837b2bff9cf16aa26
cri-o-debuginfo-1.33.13-7.rhaos4.20.gitd6a41c4.el9.s390x.rpm SHA-256: 728bed0f174af5c22b193285262a8de3238ab3b027143dc43cfa42cfe93254cc
cri-o-debugsource-1.33.13-7.rhaos4.20.gitd6a41c4.el9.s390x.rpm SHA-256: d6da5147ccb2ebd66c255bb08551436d15719b50e84375193566ee2d8a3ac0c5
haproxy-debugsource-2.8.10-3.rhaos4.20.el9.s390x.rpm SHA-256: f690936dc706f189b7a5a6c13fb34c54c3961e5fca035ed4310c639dff340c07
haproxy28-2.8.10-3.rhaos4.20.el9.s390x.rpm SHA-256: f1fc839f7e763f192ba3267b339f76a736bd588bde6aca01562ec9901282b75d
haproxy28-debuginfo-2.8.10-3.rhaos4.20.el9.s390x.rpm SHA-256: be28fe51c1d7041dddc22295abf4480e5a411d01400910c70881189f5d69ae74
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.s390x.rpm SHA-256: fb45b99bbff4ab71e6dd4800a9b666fd9427b3afbc8016777464d138104009d7
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el9.s390x.rpm SHA-256: fb46936a14880d79d73e9c9ed61195b2270bf32c7a957a621ae9a72b11a30e24

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 8

SRPM
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.src.rpm SHA-256: 33ee051dcff1364edf9c39f71bdd2e1d22f547c1d1b7e3e2c5e5ff987b76722a
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.src.rpm SHA-256: 54f2cd69bc0c533e945e00703c3dc0878506ff0ac64944ff068ff6c41ccb0a52
s390x
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.s390x.rpm SHA-256: 2438c70902520e8e2287f4ffc19c16dcbdeb43584279265e83fa8b183631e3d1
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.s390x.rpm SHA-256: ab45ecb9ee7b7c20f0af480cfac1ed572e6ce3833e805c54d97be608d52974b4

Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 9

SRPM
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.src.rpm SHA-256: 880be4797b79e2e6e7f8cde494db19ca9de63e03d3835d5d97db7ea46d5c3035
haproxy-2.8.10-3.rhaos4.20.el9.src.rpm SHA-256: 75cbe193ece8eb23d94d2a257bc46a75abfefa6ed7e2d9751cb6c4c844bddf92
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.src.rpm SHA-256: 66df7fc7fe58c2ea0993ae9d48f9103c7bfee98a570feb6db8220add77106a38
aarch64
cri-o-1.33.13-7.rhaos4.20.gitd6a41c4.el9.aarch64.rpm SHA-256: ac16426e318baf102dc57233563874980ab8011ab3431cd0bfdda5a7ac7d9774
cri-o-debuginfo-1.33.13-7.rhaos4.20.gitd6a41c4.el9.aarch64.rpm SHA-256: f05a7765ba1e905847f40839a09859d011c7a69e44c4bc61d4016297a841cdcc
cri-o-debugsource-1.33.13-7.rhaos4.20.gitd6a41c4.el9.aarch64.rpm SHA-256: 159d7c15ed3a377fbbf190d5c6b08d292c0582720f5d45f55e9d30671cac01e6
haproxy-debugsource-2.8.10-3.rhaos4.20.el9.aarch64.rpm SHA-256: 3ac66accf183a5385ada81e549104255f44e33ec8e35c7d06e8ed141c0304183
haproxy28-2.8.10-3.rhaos4.20.el9.aarch64.rpm SHA-256: 97c6cb5d65aaca0a790ccf6c757c6014079676d64df2c5f457acb74e9628f05a
haproxy28-debuginfo-2.8.10-3.rhaos4.20.el9.aarch64.rpm SHA-256: 1941c5e7b5569be226b935331dafb0012669cdfd6a504b680f0df9960780fb5b
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el9.aarch64.rpm SHA-256: 4830327d6db31ffaad37951ec49babfe43c8f8ee2e934b8c9851e796169ae8c1

Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 8

SRPM
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.src.rpm SHA-256: 33ee051dcff1364edf9c39f71bdd2e1d22f547c1d1b7e3e2c5e5ff987b76722a
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.src.rpm SHA-256: 54f2cd69bc0c533e945e00703c3dc0878506ff0ac64944ff068ff6c41ccb0a52
aarch64
openshift-clients-4.20.0-202609151631.p2.gef515cf.assembly.stream.el8.aarch64.rpm SHA-256: 75ef5f211d2ec0f028fad468b7917d063b114d5ec80475704c86869c88b0308c
ose-gcp-gcr-image-credential-provider-4.20.0-202609152131.p2.gd4bfe3c.assembly.stream.el8.aarch64.rpm SHA-256: 484b66f0a8e1fa3d94c7fd7030abf974a7d7ef35cd03abdd6d2003f20ce997a6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.