Red Hat Product Errata RHSA-2026:63637 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:63637 - Security Advisory Overview Updated Packages Synopsis Important: Red Hat build of MicroShift 4.20.37 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic Red Hat build of MicroShift release 4.20.37 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built from the edge capabilities of Red Hat OpenShift Container Platform. MicroShift is an application that is deployed on top of Red Hat Enterprise Linux devices at the edge, providing an efficient way to operate single-node clusters in these low-resource environments. This advisory contains the RPM packages for Red Hat build of MicroShift 4.20.37. Read the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:63103 Security Fix(es): net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814) All Red Hat build of MicroShift 4.20 users are advised to use these updated packages and images when they are available in the RPM repository. Solution For MicroShift 4.20, read the following documentation for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.20/html/red_hat_build_of_microshift_release_notes/index Affected Products Red Hat OpenShift Container Platform 4.20 for RHEL 9 x86_64 Red Hat OpenShift Container Platform for Power 4.20 for RHEL 9 ppc64le Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 9 s390x Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 9 aarch64 Fixes BZ - 2467815 - CVE-2026-33814 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVEs CVE-2026-33814 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat OpenShift Container Platform 4.20 for RHEL 9 SRPM microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.src.rpm SHA-256: 849b05a2a0ca2ff3c40b5cc9da0199a6f32dae27e61df728eb20aa7dac18ba93 x86_64 microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: daa80971bde4ef076292e71b9027971466948e146cd2b9a436e09e6f114f1a2a microshift-ai-model-serving-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: 916e0b8bee4ab17dbfe27fce2fc99f10729b5820983319850d8070f513f47f70 microshift-ai-model-serving-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7541303f3cd1c77c4fe82ffb250510ed94dcc64886cf77d721aa5a5bf4518680 microshift-cert-manager-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: c94ad4900e6af0210d7e50210e8aff5a45a11fda23d6379cbb39b6c50de1c2d7 microshift-cert-manager-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: de0cb562ee5270b4a9e58f91d73afe740a9d28b166b2fe0cff9bd0c6308d028c microshift-gateway-api-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: 822f281367ea8e009fa79e2e828ec66d6c07a1e7a8b5851581732051e184454e microshift-gateway-api-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: bc90c86119054dcabdb187d27dcca75ec6d5a56272b45d5451dbd824d55973dd microshift-greenboot-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7e306d8ab003abb61851cad3969ef75ec874d63552d2852322771368e17b9b48 microshift-low-latency-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: ea5fdd1f9b2a8f833bae3a0df24653fe160b3d3cdcef3b329c0fa84003ffcace microshift-multus-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: 440af79ea649d74a90d1deaa17d56198539c5c832e5cd68674c1003f3d06cab1 microshift-multus-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: be9058fdab95d058619dd0725e082621926818c02da6294a1f9594a1090db8c1 microshift-networking-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: 64ae29b6c571e0867f4d2df6ce335b7121b0d0df57cf1ff39c6113d2612b6cdd microshift-observability-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 87cc04a4152a672e3018df5061c2547f8cc576407497693bfbdc4a3fb1ee5a0e microshift-olm-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.x86_64.rpm SHA-256: bb2d5e4c09899314e64e0610829b85526481d2f89e6b696cad7f0bf782bfbde0 microshift-olm-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 8e7c49765fa3da4fc9ce8dccb3781f23ef01dd7183ffa68dba7d66c4f8e6fc9d microshift-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 5e3dcb3bbf0fad8b87599dc6ce053caf2511e5d1fe7e061e26674258a41cbc94 microshift-selinux-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 88d16c986dc6a372cca323462cdbfecf42329d71778ace9636f9f6ca39f84204 Red Hat OpenShift Container Platform for Power 4.20 for RHEL 9 SRPM microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.src.rpm SHA-256: 849b05a2a0ca2ff3c40b5cc9da0199a6f32dae27e61df728eb20aa7dac18ba93 ppc64le microshift-ai-model-serving-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7541303f3cd1c77c4fe82ffb250510ed94dcc64886cf77d721aa5a5bf4518680 microshift-cert-manager-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: de0cb562ee5270b4a9e58f91d73afe740a9d28b166b2fe0cff9bd0c6308d028c microshift-gateway-api-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: bc90c86119054dcabdb187d27dcca75ec6d5a56272b45d5451dbd824d55973dd microshift-greenboot-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7e306d8ab003abb61851cad3969ef75ec874d63552d2852322771368e17b9b48 microshift-low-latency-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: ea5fdd1f9b2a8f833bae3a0df24653fe160b3d3cdcef3b329c0fa84003ffcace microshift-multus-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: be9058fdab95d058619dd0725e082621926818c02da6294a1f9594a1090db8c1 microshift-observability-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 87cc04a4152a672e3018df5061c2547f8cc576407497693bfbdc4a3fb1ee5a0e microshift-olm-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 8e7c49765fa3da4fc9ce8dccb3781f23ef01dd7183ffa68dba7d66c4f8e6fc9d microshift-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 5e3dcb3bbf0fad8b87599dc6ce053caf2511e5d1fe7e061e26674258a41cbc94 microshift-selinux-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 88d16c986dc6a372cca323462cdbfecf42329d71778ace9636f9f6ca39f84204 Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 9 SRPM microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.src.rpm SHA-256: 849b05a2a0ca2ff3c40b5cc9da0199a6f32dae27e61df728eb20aa7dac18ba93 s390x microshift-ai-model-serving-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7541303f3cd1c77c4fe82ffb250510ed94dcc64886cf77d721aa5a5bf4518680 microshift-cert-manager-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: de0cb562ee5270b4a9e58f91d73afe740a9d28b166b2fe0cff9bd0c6308d028c microshift-gateway-api-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: bc90c86119054dcabdb187d27dcca75ec6d5a56272b45d5451dbd824d55973dd microshift-greenboot-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7e306d8ab003abb61851cad3969ef75ec874d63552d2852322771368e17b9b48 microshift-low-latency-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: ea5fdd1f9b2a8f833bae3a0df24653fe160b3d3cdcef3b329c0fa84003ffcace microshift-multus-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: be9058fdab95d058619dd0725e082621926818c02da6294a1f9594a1090db8c1 microshift-observability-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 87cc04a4152a672e3018df5061c2547f8cc576407497693bfbdc4a3fb1ee5a0e microshift-olm-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 8e7c49765fa3da4fc9ce8dccb3781f23ef01dd7183ffa68dba7d66c4f8e6fc9d microshift-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 5e3dcb3bbf0fad8b87599dc6ce053caf2511e5d1fe7e061e26674258a41cbc94 microshift-selinux-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 88d16c986dc6a372cca323462cdbfecf42329d71778ace9636f9f6ca39f84204 Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 9 SRPM microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.src.rpm SHA-256: 849b05a2a0ca2ff3c40b5cc9da0199a6f32dae27e61df728eb20aa7dac18ba93 aarch64 microshift-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.aarch64.rpm SHA-256: 15f9bf7916b4c4f39787504d7dab86650f11d581eb314f6ae84e4524a064a168 microshift-ai-model-serving-release-info-4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9.noarch.rpm SHA-256: 7541303f3cd1c77c4fe82ffb2