Red Hat Product Errata RHSA-2026:68550 - Security Advisory
Issued:
2026-09-22
Updated:
2026-09-22

RHSA-2026:68550 - Security Advisory

Synopsis

Important: OpenShift Container Platform 4.22.15 packages and security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 4.22.15 is now available with updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.22.15. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2026:68552

Security Fix(es):

  • github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.

Solution

For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/

Affected Products

  • Red Hat OpenShift Container Platform 4.22 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.22 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.22 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.22 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 8 aarch64

Fixes

  • BZ - 2484830 - CVE-2026-41178 github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

Red Hat OpenShift Container Platform 4.22 for RHEL 9

SRPM
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.src.rpm SHA-256: 254bd63f9031dfb2c1c2da19896d4894435f3549844b9f3d2765dc5e0a1a3a65
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.src.rpm SHA-256: 956dd92f9b52df9328e843661819627265ac51fc6761e279674dacbb7e8fb73e
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.src.rpm SHA-256: d5ef62d2d1c83f31ff68f809e4bfaa29391795e31f13f140d592916392419216
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.src.rpm SHA-256: 0457aec3a5ea8c5caa4daae2eb700ebd7a1cbce8c8d8342da9b0a091fd0000b2
x86_64
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.x86_64.rpm SHA-256: 3390c1e7f00598917dcf23129631772eb56fb9e0af159f0494b81858206a4718
cri-o-debuginfo-1.35.8-11.rhaos4.22.giteaf45bc.el9.x86_64.rpm SHA-256: 3bee7548b9d8ccb649b27bfdcc0b0fec1df34c9a97d2dbc040400fc012a77400
cri-o-debugsource-1.35.8-11.rhaos4.22.giteaf45bc.el9.x86_64.rpm SHA-256: 0c1f943f5675ff94269b7120caddaac81be6e78b48ec33500f312a39829ad716
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.x86_64.rpm SHA-256: c03d9b04107b666c506d77f7edc303a5395ee71cebfae8905d6890531446a580
openshift-clients-redistributable-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.x86_64.rpm SHA-256: d2ffc764b5e20aba0a6897e11a134fddcc5e886a8c8e49a59d38da084f881488
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.x86_64.rpm SHA-256: e87c0460cd0f90586352f5fe200eb909ae0fbedc17909c66f4c5a9a11823447c
openshift-kube-apiserver-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.x86_64.rpm SHA-256: 7466ae8e488438ab25cc8a20c498e680df60052037cc07656f6cae6acf085d0f
openshift-kube-controller-manager-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.x86_64.rpm SHA-256: 568e8212363a308d93cd902c0dc444bc5916f91b1ab2869a34f7494b0d12e688
openshift-kube-scheduler-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.x86_64.rpm SHA-256: aafd1fbbe82b2afb128af0ac02f4a580813969e3e717357aba191927421027c9
openshift-kubelet-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.x86_64.rpm SHA-256: 1e8e12c3825719c64d381f29f4ba27bb6b82217081e25e0cb9321dbb85b29fcc
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.x86_64.rpm SHA-256: 8aac0adce65a3e6c2e7f4fe6304db4ed2b2f1747ee53cec092955bba297d2ccd

Red Hat OpenShift Container Platform 4.22 for RHEL 8

SRPM
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.src.rpm SHA-256: 9b67f2071750d4d4980961e90a968bfd150afc278bd2e02b59307f841c4541ec
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.src.rpm SHA-256: adb6e67aab9ce4becb54047ce36f9ac5542b4d3549ef2f2d1ebe74eac788f91a
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.src.rpm SHA-256: faa30980f75710f77c99cf627bbd902888b0b5424d214afc2359296d1848dbc4
x86_64
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.x86_64.rpm SHA-256: f448a6440432b1b2a26c0670824a473771723dbc3e76272df0c743e1b8046fd1
openshift-clients-redistributable-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.x86_64.rpm SHA-256: f15fbe15e297d7ecbc70075ea5dd36d6e56c10503927426a775068ff1aafe469
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.x86_64.rpm SHA-256: d061e896d71cee8936adcc07571966e8efe4189e8deff36f2e62fc7ea4f39107
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.x86_64.rpm SHA-256: 75b34263916c298dfb2c12f19d7bba49822a3066490fdd9fba5d4450f1a2d227

Red Hat OpenShift Container Platform for Power 4.22 for RHEL 9

SRPM
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.src.rpm SHA-256: 254bd63f9031dfb2c1c2da19896d4894435f3549844b9f3d2765dc5e0a1a3a65
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.src.rpm SHA-256: 956dd92f9b52df9328e843661819627265ac51fc6761e279674dacbb7e8fb73e
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.src.rpm SHA-256: d5ef62d2d1c83f31ff68f809e4bfaa29391795e31f13f140d592916392419216
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.src.rpm SHA-256: 0457aec3a5ea8c5caa4daae2eb700ebd7a1cbce8c8d8342da9b0a091fd0000b2
ppc64le
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.ppc64le.rpm SHA-256: 2d437fa54bcef9ba847858f93c3772d9cad07b5cfba50b3da54067e90f396696
cri-o-debuginfo-1.35.8-11.rhaos4.22.giteaf45bc.el9.ppc64le.rpm SHA-256: 69b0b9071d86aa136e1b63d9bb3b15c10a5f9c2cfeaa29216089ca7d7b794e78
cri-o-debugsource-1.35.8-11.rhaos4.22.giteaf45bc.el9.ppc64le.rpm SHA-256: a34338646c325ed80c315812f4d77bcb3097719b4f4b3c00d6cc7a64667ac543
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.ppc64le.rpm SHA-256: 1a7a280ca61a190f987606d9af431d93a39fa7f12cba5053a120ea8ed109b68b
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.ppc64le.rpm SHA-256: 505d2b8cd39c9e3ad40ccc9dbf669345fa3d0da44f395fbdd0d52a060552e743
openshift-kube-apiserver-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.ppc64le.rpm SHA-256: 0aeaf011568c3fa588f7761e83fc42e6c51b95b5a24ac8d9f0edc160f16906ed
openshift-kube-controller-manager-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.ppc64le.rpm SHA-256: 76366c78a112871bb250266b4cd40cc01978ffdc967e82da184c3ab3c356d2ae
openshift-kube-scheduler-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.ppc64le.rpm SHA-256: 4b74a8d5a44b3229c619f39e5db99543fef31541eaf62cf8cfe813eebd41fc52
openshift-kubelet-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.ppc64le.rpm SHA-256: 5017731f6f6bcaeb7265e8b0af0024f21101d73e4aa5cca8872b21e658f4ad40
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.ppc64le.rpm SHA-256: 74bd8666b604175e62eb787c2c6150e884d5e36137fb8fdccd8420d3dab4b06a

Red Hat OpenShift Container Platform for Power 4.22 for RHEL 8

SRPM
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.src.rpm SHA-256: 9b67f2071750d4d4980961e90a968bfd150afc278bd2e02b59307f841c4541ec
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.src.rpm SHA-256: adb6e67aab9ce4becb54047ce36f9ac5542b4d3549ef2f2d1ebe74eac788f91a
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.src.rpm SHA-256: faa30980f75710f77c99cf627bbd902888b0b5424d214afc2359296d1848dbc4
ppc64le
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.ppc64le.rpm SHA-256: 6e19fa872324b1703a89234c90f74dca06519c438066471bb3777fb891a2a352
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.ppc64le.rpm SHA-256: 7be4d87539f9e5f22cdef219e1219ddebee948f10269a8b9d6f57dedcccdde46
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.ppc64le.rpm SHA-256: 11a773fa8ff7358ca7208494de960927505bbf1e933c549108114f1010cfda6c

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 9

SRPM
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.src.rpm SHA-256: 254bd63f9031dfb2c1c2da19896d4894435f3549844b9f3d2765dc5e0a1a3a65
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.src.rpm SHA-256: 956dd92f9b52df9328e843661819627265ac51fc6761e279674dacbb7e8fb73e
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.src.rpm SHA-256: d5ef62d2d1c83f31ff68f809e4bfaa29391795e31f13f140d592916392419216
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.src.rpm SHA-256: 0457aec3a5ea8c5caa4daae2eb700ebd7a1cbce8c8d8342da9b0a091fd0000b2
s390x
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.s390x.rpm SHA-256: 73a9a28c9cbcc4d0f9e88842dbabb7b7a0875cd5c9152fce42e60d37d22e9c97
cri-o-debuginfo-1.35.8-11.rhaos4.22.giteaf45bc.el9.s390x.rpm SHA-256: 8e35dedef87477c118b39087c0adff86c6c6b28a98454dbe5a96e7c7cd0abf7e
cri-o-debugsource-1.35.8-11.rhaos4.22.giteaf45bc.el9.s390x.rpm SHA-256: 42a82affebeb72f4dab1d2c8c33131810cce2db6212de09cb81ffd5a65c62870
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.s390x.rpm SHA-256: 0ff954113412138134be6f882a3f74803997802d6dbcd5b08f09ac8594d24ded
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.s390x.rpm SHA-256: 03b8f43a921b7337d967e6268b351137e8f1d4d829ccc5458190ea9650c160ac
openshift-kube-apiserver-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.s390x.rpm SHA-256: 97c3b6d6b87d2b42183f1f2e6826abf208fc1f3d3b7751fdbf73044a500a481f
openshift-kube-controller-manager-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.s390x.rpm SHA-256: 44944a4c06918c07132b1dfdf19b482e4988147d7a08964cf22ab405a2c94ceb
openshift-kube-scheduler-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.s390x.rpm SHA-256: 0639ec725c5720aff9d7c6f4a6c7dda43091452233a2a9a7f735adad5dda57d4
openshift-kubelet-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.s390x.rpm SHA-256: 3e30524c4a112abb1ade835cb0ef3a99f1e9e6dffbde2465b7c30207e04191ff
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el9.s390x.rpm SHA-256: aee5c8b6f5dc0efd9f900c197df7bdd79ae25de0166bba898211ebb5f2d658cd

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 8

SRPM
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.src.rpm SHA-256: 9b67f2071750d4d4980961e90a968bfd150afc278bd2e02b59307f841c4541ec
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.src.rpm SHA-256: adb6e67aab9ce4becb54047ce36f9ac5542b4d3549ef2f2d1ebe74eac788f91a
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.src.rpm SHA-256: faa30980f75710f77c99cf627bbd902888b0b5424d214afc2359296d1848dbc4
s390x
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.s390x.rpm SHA-256: d2f9bf9be7d8537933da7d2ea2ff75ff0245566cb8bd46fab250b25c3d814e16
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.s390x.rpm SHA-256: f8389242bde70fff5efacc94d5b2ed43548b34745274c6d739cd41061424ee7f
ose-gcp-gcr-image-credential-provider-4.22.0-202609141946.p2.g13ec7ad.assembly.stream.el8.s390x.rpm SHA-256: 6a5cacf2e3216ec2179142edf4d41c7a8b5f43f7589be6833b898d7bece2a425

Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 9

SRPM
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.src.rpm SHA-256: 254bd63f9031dfb2c1c2da19896d4894435f3549844b9f3d2765dc5e0a1a3a65
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.src.rpm SHA-256: 956dd92f9b52df9328e843661819627265ac51fc6761e279674dacbb7e8fb73e
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.src.rpm SHA-256: d5ef62d2d1c83f31ff68f809e4bfaa29391795e31f13f140d592916392419216
aarch64
cri-o-1.35.8-11.rhaos4.22.giteaf45bc.el9.aarch64.rpm SHA-256: ba34bd3a4a0f9b7fcf1a306c76242043244a84be1a44d1541ba210d8c53f9204
cri-o-debuginfo-1.35.8-11.rhaos4.22.giteaf45bc.el9.aarch64.rpm SHA-256: e2c1eeba05d16040e1ce1b3fb22231349e7560dca8268d56b865aff931c00142
cri-o-debugsource-1.35.8-11.rhaos4.22.giteaf45bc.el9.aarch64.rpm SHA-256: c7b1ffd5fa2a0506b4c223d8d94c7177c82af27d72df65462ca63c0cf7e12712
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el9.aarch64.rpm SHA-256: 4c102c93adc3c58b17e742043b4b1073fadd365a815ff246472cfb5d0d5ccff8
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.aarch64.rpm SHA-256: 349db0082425951723ff07580aa44aaa83da79ed8c353ad35d10b11801f6152b
openshift-kube-apiserver-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.aarch64.rpm SHA-256: 03261d9f7f1f6370fb9bc79661789603c5392fff382e62d45171f34beb8a123c
openshift-kube-controller-manager-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.aarch64.rpm SHA-256: 6d7abef9fcf904040bca0e3e995f347dcfa7f4035a8a335fa48c1d67d9b1fbe8
openshift-kube-scheduler-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.aarch64.rpm SHA-256: 4eedeed739c01e6c53f2ade848537962b0d8749f315e160b0e854fb57cc2d468
openshift-kubelet-4.22.0-202609141614.p2.g160626b.assembly.stream.el9.aarch64.rpm SHA-256: c41afbdd6b7851971b764ea9970513e8f7f79e7946325a625effc544b1e1b955

Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 8

SRPM
openshift-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.src.rpm SHA-256: 9b67f2071750d4d4980961e90a968bfd150afc278bd2e02b59307f841c4541ec
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.src.rpm SHA-256: adb6e67aab9ce4becb54047ce36f9ac5542b4d3549ef2f2d1ebe74eac788f91a
aarch64
openshift-clients-4.22.0-202609111846.p2.gaea5a82.assembly.stream.el8.aarch64.rpm SHA-256: de2aabe2724a22ee497a614af89c79cc04fb1e58359873009e7a534b60326415
openshift-hyperkube-4.22.0-202609141614.p2.g160626b.assembly.stream.el8.aarch64.rpm SHA-256: dec5d58913dacf2007d5f987f52a8569ef7d276555a2ac7b2b41ce65fe7d58a8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.