RHSA-2026:54580: Important: OpenShift Container Platform 4.20.34 packages and security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the RPM packages for Red Hat OpenShift ContainerPlatform 4.20.34. See the following advisory for the container images forthis release:https://access.redhat.com/errata/RHSA-2026:54583 Security Fix(es): golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.All OpenShift Container Platform 4.20 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift CLI (oc)or web console. Instructions for upgrading a cluster are available athttps://docs.redhat.com/en/documentation/openshiftcontainerplatform/4.20/html-single/updatingclusters/index#updating-cluster-cli.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/openshift-clientsto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el9 - Upgrade
Upgrade
redhat/openshift-clients-redistributableto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el9 - Upgrade
Upgrade
redhat/openshift-clientsto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 - Upgrade
Upgrade
redhat/openshift-clients-redistributableto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 - Upgrade
Upgrade
redhat/openshift-clientsto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aa - Upgrade
Upgrade
redhat/openshift-clientsto a version that resolves this vulnerability.Fixed in 4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aa - Upgrade
Upgrade
OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.20.34Patch RHSA-2026:54583 - Compensating control
Upgrade OpenShift Container Platform 4.20 to the updated packages and security update once available in the appropriate release channel, and use the OpenShift CLI (oc) or the web console to check for available updates.
Event History
Frequently Asked Questions
Which OpenShift deployments should be updated?
All OpenShift Container Platform 4.20 users are advised to upgrade to the updated packages and images when they become available through the appropriate release channel.
Does this RPM advisory also include the required container image updates?
No. This advisory contains RPM packages for OpenShift Container Platform 4.20.34; the associated container images are covered by RHSA-2026:54583.
How can administrators check for and apply the update?
Administrators can check for available updates using the OpenShift CLI (oc) or the web console, then upgrade the cluster using the applicable OpenShift 4.20 cluster update procedure.