RHSA-2026:22388CriticalCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.23 security, enhancement & bug fix update

Published
June 2, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-42945 →

📋 Description

CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability

🎯 Affected products82

  • Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:e4b337ebc2c17165cb073091f75bc9726e13c98dd170efe59d27af502c732a9b_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0623af1a443732cb6d241ca5b5a118a443fa96862e12b97ec46727d904651623_arm64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:265698eb2e482ed94195ec24975525b95c3256426381a3433fc95ad0a0e01f83_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d228b7b55d2400a036827caa480c1ba34a00eca2ff7411e714dedc27592df53e_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:fe9c10bb2fd984ee84498e4ac5cb367d4048e4917987888b1c059e4075017c29_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:0f954e81a1a5ddf43654478d0d19d3c4b1f64700487a52e25ef9d4ff57706ac5_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:7dd45ee25c7ea111b332677cb6bca2a61d6a520841e8dba7070a18e946e34047_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:ea0c5d5de65a09434900967c73ecc5b32df761345e0da2612c0566be3c5b89a6_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:8b260b99f38cd644b3554b5f6b5e5024c76f0316387eb187f11fc3ca0b0dfd2e_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:9002acf3b0de9fc871cf53324b94f9fddad16014819230f05b56f78302285998_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca47dcdb6110594a686c352856d28cb89fa673276ea257e8c362aaccd6cfdfa3_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:0aeeeedc4c55d67f19805f0b2623c77b005995b370dbe48580dd54f12a4d7558_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0122f7fa541aee5df69bf5d67d385e41941744da4d99af2322306de91a8e0a07_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:888cc9d7770249951b3408fb027cc7b3037c021238aa4bf8e197aa8da17bd743_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a5d31b1d8168118b6796362c2d0faeb7e5ccd827a4cfed6bbad12e9f06ac1dd2_arm64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:e780c3c07d1ab843b81c8224e75e0708c01f29392d6d74aab170d9a826eff76f_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:88ecb0315edbfa38b6d9b35efe1f560400eb37870a703a8e9bb9bbbd94df0207_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:94716f2159fa51e879398c82f8818416c6341fe61e732b7b91267b7c37a98e33_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:cf195505f93b015258fc125189ea89bd72942e252eb20feb85b16e9e1ac06f3c_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:d1f518e1c876e18a38a5f1c807a5eec6345a297699f35a640deb2d390790fb2c_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0a3f2c96bd0cfaf9675df2ea3ad542c6c3c766d9d82b2a3322a9a4305f5a688c_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0fd668e032c5662adb6872136b3c60478b74b34bcea46c1dbb2def2906ca5b84_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:277e55ebb891f39d3edb61fa8cbdc57327a20e77cd41d95de737af6af7e9b299_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad7c99ed79c976a7cb900f1c27524dba385c916308944522c673e27ac818a8eb_arm64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:2c571367881e40419ddabc20b637d819252aa4d0874d02be181b8b59db14b754_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:2fa4faaa646e4a14366c9fbd2d8169b394cad7cb6ae741e5a3aeb5c7ddca0a53_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:b44ab3f03234c181b70df25262d5e0a1d9a7a544331d498754154a89c10e6df0_s390x as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:fa80c80ffaa4340822dc7d96488d2c89cd72318c431717d05fab8c5f086ce242_amd64 as a component of Red Hat Openshift Data Foundation 4.18
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:78c517d3f4338d6443863db40c3e7c8be2274047c816b2018249c8def2931a97_ppc64le as a component of Red Hat Openshift Data Foundation 4.18
  • +52 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)