RHSA-2026:19238HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.16 security, enhancement & bug fix update

Published
May 19, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-6321 →

📋 Description

CVE-2026-6321 — fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies

🎯 Affected products92

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:a28ce9aa5a14ee7487c6566d74ca16a6269df0b79f56002ef3b3faf21515b050_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:46b89325494656a736b2ad04426f5906571652b368991f4fce6eb52bfecfef39_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a8a33b245aa709e344c1682c1a8ba9a1f84456b719065388e4a86b100401a791_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a9965b30c8c88ded1cba79e9dd15dad18fac6c52cb0ad8d5b9f066d13228e9cd_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:acab4b2c173735dadbb1957f5c3ffc2979dbdb8d6b2087ae52dac2b83dfa6707_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:02964313e4d722c8925deec0a588c6843cd8ffa4a2053760ae5c7f20af73015d_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:60b71a668641692237ec326cb51abdd7a42c1284fb60c7aeca73f414a50c268d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:df28004d1ccae16b592e6d4ac7ea199a412fcc30724b8ccb336ab0ec1a57739e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:47446fe2279e8acd361c037a0191623d9545754db5ca13c88f2f3e495edfd658_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:780298f778abd5059fb3e847898b39fb16d1db587d49dd6ca49ad14a7f33ac06_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:af27a316bdb502cedda1373f814ba7d4e8385854a509a0dc553889d1667dfdf5_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:72e766a5f5e0bf665191e44e0182a0005459f6fa73c625d72cb9b9fe6840298e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a375737b21c2e774084ea36e291bcb532846a9fd85427182d72eb654e0155c1_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:72db554dd83079a3d18f8a302ed15da4f0704586b0ef4df3e20c7cd939c07e1c_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c2884fa485fca2e8014823b7a00c2cc4b33b92fc768bccba0eec4f3af2204927_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:ec3976f51ca79f0887547254590b5d7a5d6103f4cbaf6c96ad8f954d569b1a35_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2feb075fb3a2aa2e41ddd6e928e43dfdcc6a2d0440dcf5c84e9c3e59e8229ead_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:3a1f36672e4ecd4498b161ea3a473d02329c86e3bd36a00748bcc96c27dc891f_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7ceeb6afec9472a63b40c72930b2a44e7c72dc30f550bef86c7b63f6a69b85de_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:fd285535f9e99224e5b7147d42e5747fab1c1447799279e88b2df9dab75fcd47_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:646d4ba26cb86ae797da5d28131d723930bb5649c72abd095c81dc2da17ffd7b_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0c867b7cfeab19ad2836aa49ca5e1e8bffadabe7112665f28279d816adf55194_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:1d3a78a89c58a34ab41f980e3a7df7bd74caf8bc369fa198e1ea0823b4474b84_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:66de48dee868e4da93f3b5da7a26457ed6c3dcd18e130d6687f0e4e860f7ddc1_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:693e3e5f7f7da76563a0a2c0f554d827a20affc6d87b8f3e937f465c9436f66d_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0132abcfa5916ff9129bf4f6c9b5f31b37a22bf38fd9de97fbbc057b73afdb4d_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:541d720014623b5a4aee5397839fdba587aed2e871f49285a6a4abf7792fa310_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8e66a5228e6def497f038e47984cc19a1e29fc67d6a07f8768501630e0b67232_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:af2405c514c7fa039fb209689f6acc157c663bb13673792f0b76abb55888d062_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • +62 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)