RHSA-2026:60668: Important: Red Hat build of MicroShift 4.21.31 security update

Published Sep 1, 2026
·
Updated

Important: Red Hat build of MicroShift 4.21.31 security update

Other sources

Red Hat build of MicroShift is Red Hat's light-weight Kubernetesorchestration solution designed for edge device deployments and is builtfrom the edge capabilities of Red Hat OpenShift Container Platform.MicroShift is an application that is deployed on top of Red Hat EnterpriseLinux devices at the edge, providing an efficient way to operatesingle-node clusters in these low-resource environments.This advisory contains the RPM packages for Red Hat build of MicroShift4.21.31. Read the following advisory for the container images for thisrelease:https://access.redhat.com/errata/RHSA-2026:60477 Security Fix(es): net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame (CVE-2026-33814)All Red Hat build of MicroShift 4.21 users are advised to use these updatedpackages and images when they are available in the RPM repository.

— Red Hat

Affected Software

31 affected componentsFixes available
Red Hat Red Hat OpenShift Container Platform for Power
Red Hat Red Hat OpenShift Container Platform for ARM 64
Red Hat Red Hat OpenShift Container Platform
Red Hat Red Hat OpenShift Container Platform for IBM Z and LinuxONE
redhat/microshift<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-ai-model-serving<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-ai-model-serving-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-cert-manager<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-cert-manager-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-gateway-api<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-gateway-api-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-greenboot<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-low-latency<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-multus<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-multus-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-networking<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-observability<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-olm<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-olm-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-selinux<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-sriov<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift-sriov-release-info<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
redhat/microshift<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-cert-manager<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-gateway-api<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-multus<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-networking<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-olm<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
redhat/microshift-sriov<4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/microshift to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  2. Upgrade

    Upgrade redhat/microshift-ai-model-serving to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  3. Upgrade

    Upgrade redhat/microshift-ai-model-serving-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  4. Upgrade

    Upgrade redhat/microshift-cert-manager to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  5. Upgrade

    Upgrade redhat/microshift-cert-manager-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  6. Upgrade

    Upgrade redhat/microshift-gateway-api to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  7. Upgrade

    Upgrade redhat/microshift-gateway-api-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  8. Upgrade

    Upgrade redhat/microshift-greenboot to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  9. Upgrade

    Upgrade redhat/microshift-low-latency to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  10. Upgrade

    Upgrade redhat/microshift-multus to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  11. Upgrade

    Upgrade redhat/microshift-multus-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  12. Upgrade

    Upgrade redhat/microshift-networking to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  13. Upgrade

    Upgrade redhat/microshift-observability to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  14. Upgrade

    Upgrade redhat/microshift-olm to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  15. Upgrade

    Upgrade redhat/microshift-olm-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  16. Upgrade

    Upgrade redhat/microshift-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  17. Upgrade

    Upgrade redhat/microshift-selinux to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  18. Upgrade

    Upgrade redhat/microshift-sriov to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  19. Upgrade

    Upgrade redhat/microshift-sriov-release-info to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9
  20. Upgrade

    Upgrade redhat/microshift to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  21. Upgrade

    Upgrade redhat/microshift-cert-manager to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  22. Upgrade

    Upgrade redhat/microshift-gateway-api to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  23. Upgrade

    Upgrade redhat/microshift-multus to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  24. Upgrade

    Upgrade redhat/microshift-networking to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  25. Upgrade

    Upgrade redhat/microshift-olm to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  26. Upgrade

    Upgrade redhat/microshift-sriov to a version that resolves this vulnerability.

    Fixed in 4.21.31-202608272317.p0.ge6439cf.assembly.4.21.31.el9.aa
  27. Upgrade

    Upgrade Red Hat build of MicroShift to a version that resolves this vulnerability.

    Fixed in 4.21.31Patch RHSA-2026:60477
  28. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch RHSA-2026:60477

Event History

Sep 1, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·12:05 AM
Data Sourced
via Red Hat·12:05 AM
Severity

Frequently Asked Questions

1

Which deployments should prioritize this update?

Red Hat build of MicroShift 4.21 users should prioritize it. The advisory identifies MicroShift deployments on Red Hat Enterprise Linux edge devices, including single-node clusters, as the relevant environment.

2

What is required to exploit the addressed issue?

The issue is a denial of service in Go HTTP/2 caused by a malformed SETTINGS_MAX_FRAME_SIZE frame. The advisory does not specify authentication requirements, affected exposure paths, or configuration prerequisites.

3

What should be updated to remediate the issue?

Update to the RPM packages for Red Hat build of MicroShift 4.21.31 and use the corresponding updated container images when they are available in the RPM repository. The advisory separately points to RHSA-2026:60477 for the container-image release.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203