RHSA-2026:22390CriticalCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update

Published
June 2, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability

🎯 Affected products81

  • Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:aaf151f3591211c73fad26de09867e218d34880e9128f0a53b510d6b5a289b76_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:16d735432b21fed4c5071c6975ada04d962338545e6d1d705696560e17c63707_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:70b50e03c6503aeec7457ef0caafa5dc7fa8d758b5daac75b5f2f32c43ff1fbd_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:75937b9edaf7bfb4d0054c14f36ae9207adb91d45440b515d8d1621bd308434d_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:8f3a4a3349901782a805e4f4bd18b75a9ae8ff280efadf791c98d6cd3980fec7_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:1351d065fde22fa6ebb8cb55fbc9f70a677884dad51d75fa947b08602ee65f74_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:b5f691cca153e4acde6f9eebe391997870f0f73f855b6a582beb1dc3268470d4_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:f168c8e833efb64ba9a78614d9aa6b7b4a908c57cb48d04c759eb9ebceb78fe5_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:4e888b05456042e7e56bb3f6c27c9c2b217a42d65c161c0053e81388dfdc0575_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:768084969d3a3129a0cef7514e27e94f3ed78addf8130b0077052779fa3df6b7_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:c5ce0f7d707f1365d7c119f67e7861a838073ee74a8e0ebb054190cd01a3beb2_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:098d938ae393a3fbdbb18a6a1b538a85c1e2af9d1515ba8dd7aa21e5e8908eee_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37ff6eaf55c2cb0ecc7a33a8d27349bee9e38aecd3a7888129fd14838bb96252_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3afb42f2893a40b02b89e4bfa06320131b796a955490c51d8dcc2b3f95e07a8f_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c92235900409b5e521f6005781ae19643422c3e2733d880e0f8ddf99953199e8_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:d8f83fc83ce2d9aff1d054eaa2aaad56355c90bf29c23496c7c31479886098b1_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:32ae2c126cbc9ac4775221fb4993ca34eee1d6a8977829c0bd1648d400a4c112_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:4bc6fa225f085e086073a31aaa9648d0e64c1b354ea455489896cab1a3b6b0b5_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:6a0eb52fed63141de8c52ff57f642ef3fb0115ba701843787224cb14516bb01e_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:8608f34a443ba136d85dafe79c6914be877993c12c61cf7d3b9523623dccae4e_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:5eec3a9b38fa1206d3460e0fe39d64bd2d974ac5fdb8ef222ca250b1f2d4ba24_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a5dd23749dcc4836ed33237ae9ec9b26a41ecaa44b2c7882e86ddde1c455e8f5_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e39a053c90b8d0f3ca4dc0657d81e69beecf91dcb449407f1dd655871512b176_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:eede593837897068f4f3974815045498859d557fb5bc4d2dafc7280e3d90d650_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:644f7e091fd3ef9066e1830297ffe7974bcbffaf0d65935f1ac7cedb69fc87de_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8a7be14421bf9f2585830e0c2dfefcf45f54cdc73d0a1d627b03f0534215c66c_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8fe158dc94b79c38a430f7f8dda5429e811849c6607e1caf5cd0b1311a87105e_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:0b3389fa0e0078cb30b961205601248df69cb966a7182d14a70345b2f4df1737_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:01424c0f97a08cb6ac4434ba732f24e5ec1eb1247f6bc90a7d71d03305dd307e_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • +51 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.17/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)