RHSA-2026:22383CriticalCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.13 security, enhancement & bug fix update

Published
June 2, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-42945 →

📋 Description

CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability

🎯 Affected products103

  • Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:67fb1a3e46ad292b9e6c88a55753c4d060f810c2a7d501cb19d20eb4c2c18b84_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:101b778cacafeca455acb87beeda7bfcad736d4bea71c2e247a1813fcd129e51_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2c3008bb5cfe78a4460d413b13e3c690b94f0c5418f5a1c9c58540ad6a01ca65_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2d2e50af5ec3721cd9cc9b2cf4dcb2370689352dae973e8ee00abfd7a8f6582c_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:8d54a1319b8dbe000fb525562173d891f488a4ed78b5b0fa8a9cd551eb77db42_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:7c8a7cb710b622ed172a92079eaadb9c32a07d7c44b4bf48df7c0779b21fd0a8_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:a48e36ee9c3d4823fbab7be2ce2490e2b5f1861af69de569c2b338cedbf04967_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:d070d3f339ea10c3c154c5d95cb7f317953ff5024da213d61924376823d2ebc5_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:e95ebd9350cd9578697ad184ab04a0dce287bba73d811354a0913d945c0d651f_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:605c12168bbdccdd862c5970f7f3ff1e3f236ca45e8ea3347e7702c08bb7d07a_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:62591f0144882959b520a57c469598de28f80bcce2e2b9d8e16c4628302a9bf8_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:b199e147ee9e8b8e995ceb5eaf68b02c95a5f15f8d701b95a5858c1da95708ab_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:f190e5978feda55f4e2aa8a35ee041b37d0c98047fbc239d1afc82e64fb15698_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:b8a7260daa27d090b5254df9b4f965a3823eb05569ffd6249d00205433392f6e_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6ad2ab591ac9477c4040e7f3aa4895b6ff953896940b818d314d4280c8fb9418_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:73685b15638d52869d1b12745ffcc7ec7dce8213aa607bacfff766a2a9c6c4d5_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:de1eb3fb88a49db53518f7ab5e2a49fd73b8273f53ca6b725b5714decea4c896_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f8a3cfbd2469af8dec7a66b2a82aef41c13031d48992c4ce1aad3b592efcc6de_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7e9733ad51acef46e3fc35fcef31e16462e9077e2405c8b7b790473425849ec6_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:ce83c4fdd34c7d5ea989f6d17bf9ba09cf1d02910014739a8a46090181a92bc9_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d9b66294715beb56bd4a42b217cd3670c1d3bef3524cd866eb8f16de103fad16_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:ff5367d45f22f297aeb34da73784cda6e3dc04bd29880ad528b3b198028a65b4_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:bc7f048d077410138e58eec48439a8e88badb1cc116ccdb7cc1bcb02cc9b2156_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:236f83e71ec4dc56b2bf3baf64eb6559a55a263ece54a8e060f4d04792bc4c56_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:307e3bf044fa7a4a7b7d737bedf2efcedb1f5e26ea47fce057988b90533a4761_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:cc9811bca2d4d54ad6a399f15c883a517e69370144c2ab1e316f4cfda240619b_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:da392320e573424d858ec9b235476448ab311717205a606bc73acfe4513dbd83_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0c1c1a36f222d3e24b1e0d7598f4f631e09b64513c5dc9e50db54dd84eed2371_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:6d2d9c5ff9e813afdfab7fc6e0af9357506175c278eee8a87d98715a68d88745_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)