RHSA-2025:16504MediumCVSS 8.8

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Published
September 23, 2025
Last Modified
August 22, 2026

🔗 CVE IDs covered (9)

CVE-2020-13630 →CVE-2020-13631 →CVE-2020-13632 →CVE-2019-19645 →CVE-2019-19646 →CVE-2020-11655 →CVE-2020-11656 →CVE-2020-13434 →CVE-2020-13435 →

📋 Description

CVE-2019-19645 — sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements CVE-2019-19646 — sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns CVE-2020-11655 — sqlite: malformed window-function query leads to DoS CVE-2020-11656 — sqlite: use-after-free in the ALTER TABLE implementation CVE-2020-13434 — sqlite: integer overflow in sqlite3_str_vappendf function in printf.c CVE-2020-13435 — sqlite: NULL pointer dereference in sqlite3ExprCodeTarget() CVE-2020-13630 — sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c CVE-2020-13631 — sqlite: Virtual table can be renamed into the name of one of its shadow tables CVE-2020-13632 — sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

🎯 Affected products92

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:6978b7e8cfa17635dadae3da6ca1bad86b151f72c28c1e79d6d5be97ddb7a1be_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:29fb0fd11d7a108f65416fc80abbd8bb50f64a173689e923753c01df79f531e3_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:8e37db34e54d4427c59b0951d14131ebe97fe9bc4cbdb5a905f2af331775d5f0_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:cc6370aa9b7d103f358a5655681a936bcba0e342316110c8a4bd1666ee4aa94d_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:df1eee04994a4cb4e0912dcceeb163cbb5eb991e00279e32f59f5bd10870e027_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:4c44c079dccf8e9cbf0a1bbf295986fd496aeb0aa23ad8d324302e218f14ba8f_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:8fdda2870c69df024b8b34d757e9c2f3ca56b92636491278ff25b4c146b0dc95_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:a4021d2130cfe6a04c7ff23547239c5114d87ab6db8b630ccff025557a2b686f_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:3959ddbd5e30450cd65ba2cee8bcbe66fb260d5e17d864d20da1f8532a472f58_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:572faf6e2631e5dbb27d305c04b1c290f85282fc42013d4a8922b05065b1d69e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:6032544ab70cfce0cd7ae95b486e2bc2da3a9d832862b7cb4bec4d8522c73ed9_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:29daf6295e83486594fa96b5c996cfb0c25c49a1a08d9e0bac65c5d9df0b9ca3_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37c75c349e28507c8acce4682a8f84ae5b270a2045d75288f3b499f62d3b48ee_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:62327d023db8ac0a30102455fd9e19bb74015dc2f4fd12ee8989379a2b28cea2_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c05fa74e94e489d4cd1e1ac2d222599027a490822e73200505a41edd2d6f34ce_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c0925c14fef769a74cefbf902659aefecea7aa6241f1281ff2f14712dd356747_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:3baa5eadf2d9d389bde7e7c1ace3c7047904505c3ee7a27ffe7ad135e0ec8eb8_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:522337ac4f9d4369db40e1dcfe666923774fd731b35e2a2517827a1325ff81ac_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:c9c249f77da5494a08151d90211799f46c501a136c63bdf5fab8528033c1a078_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:cb3166d9b1f2bd1a622808704a104c4ceccbbcad080d29085079b518e168889a_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:71da708ba3e0b3c9a86b6d2ad57f27bb01e84b6dd928414b4556df264de739a2_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:189525c32c30efde779dde1bc7a1310ea1845bb816cfe721081444f515c7fc14_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:220d62f2a0718f2946f0e760e79b8ab5dda8f76a5b32a555b6c4f7e122a6da0d_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b78c75b4a8aa1413dba5af43b4a499c0f2f5d0329bd4a1df7b99bbc856fa273b_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:cab6cc6254d2226ea5ad6e7ca0b2ef445912983bda02612788a822cea77d50a9_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:3e281be3ee1669685cc79a689b0f78c5372ee2595e845e40909389f92a5e372d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:71919563f2cdd3e596f18d9f86fd56a7ed32051f7f52cc4aa25a04c2548b99fd_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:b9f32156698d517524707b1e62fb07d244fd3c5baa6c8e0dc63b7f3136ecb689_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:ca94bffe8edb6c4abecf9ba69408094c617dcc3ac9a4fc11ff03128d97904e2a_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • +62 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (13)