RHSA-2026:22389CriticalCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.18 security, enhancement & bug fix update

Published
June 2, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-42945 →

📋 Description

CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability

🎯 Affected products92

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:2a0021697c97b041725d6b01cd6bda0d15f9ad3b653c8c0a92ab6cc29e80e413_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:36df70d42738e02295bdfde10b0bbf64bd098b1af07818fd71faad552aff0636_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:65d9ce70177397eccc6e2464a50238884fa9131ab0528f5cc78c1e909a3dd2a6_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9111695d5774a9bc9118082be7890379ca059a2f6db6f275bb6f98e95ea50d14_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:cd19ead39e3519498b4bb16bf684c09cf7bbe7834e52208ac6088427392f744d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:1b82042f34ffdf3399c6f17ec87ae39e43554525e9d7694ca3ee3c5c462a32da_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:6bf2be0b8261c0f3db79839278f77eb42cc4b77795d43455a5e698f0ed410b14_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:76b0fb604b7f10c47504ed4fba857a0912b472604b6eebf560898a7a669db70c_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:7070138a69233a42bf7a319cccf3625db7147f2d27688c3da1ff49914b755440_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:72a203f360462b4b27d3dabc8a9e31c8dcc91822a3ce51eb419a5b459f85f73e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:87b9bf6e01cfa2bd2770f3baf79f6e2dc11acff02d7f4a543012c71cc098831a_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:f26eed8e1ed0391923132a98d863abdd50565fa089cd9d768046244d68252814_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:31fd99961e63d6611a035281b8fa1bb674de9387269ac0fd96d65887e12d99f6_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69d60615e387e5450e32ec0724569f1552055fbdccf0c74dd85301f3f40de2a7_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:8f67466c99ed674355163b125d4e207b3ae9d7395b497efbc4472d0a0e1da793_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a9bff2e3b606e5bae70aee6f9cabec70e009cc4fdf5a8d4b5181e5273aac35a1_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:3e847b1a9fecdf4f1e9d3f56aec6d3e058510365710bc96a1274ffafc179edd3_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7c6abcf4e698a8663068ad2aca0c6ad2f093c67831629f2f5cf1545bd8b2ca69_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:806d19f40e07bc4965ec29905dbaf3d13ce100d135b6ceab58215c0048e51dc7_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:ed0f9c6a5e0e35beb43a0538e6bf82346a96e9a3d81cb159c119c6af1a02c25b_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:bdba132d2d060591cc1845b6ca56584111bcf998658e869898c829a2338330f2_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:01b16b302ffe3527305dd89093cc4c0b2d483d205b96fb45c5832cf20bd23c14_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:50e0d70af4e578ea8483f4921346f99fd36da10a0e750f5065dd063f0d53040c_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:61f558131c8c6526472dcf09017997aa5bec7c363c3b5e1a08263821ba3bc08c_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d87a66b45c4967b5f261260986d73c439ada0e160616fdfc03138a8e9d022283_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:7ee4d5269a2065bad8328a220059d18805871ed364c6c2886783324471653861_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:96524a4c7a321e8435a5ff7e56c29554d17a50d941f716d72446004aad33068d_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:996909468327b758e87e97430ce8c51feda00f31d21878756a03178f2befbc06_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:cd0d3589fca34bb586ec0935ed6ee6ce3b554003470b484e83cdd8a0b33998ad_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • +62 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)