RHSA-2026:22393CriticalCVSS 8.1
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.29 security, enhancement & bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability
🎯 Affected products73
- Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:436856f189563363cf1740460cce7d9ff96123d78128a37649e89fe0f7bf297c_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:b4f5684e79d36b9be7318b598a761243a5276853956f2dc14a6232be86be166e_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:ecd69c748abbf98fb9886520e1a036fd6279284c267f2ff69a8fefd822b1e08d_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:9e589d2a8cb2b51fc790e4a8207d9249220f20142453144edbb62fc4f14813fe_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:cec48abba982fd192d0d953b7dbb8cd45626ea9cede3b2a1fb71d009b0d3f616_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:f9f86cdd7818740a98e952cacf8f4bb527285833bb8a9d08ff20146626724cf9_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-operator-bundle@sha256:0845bdc5768a6b85a6074a6a9bcf87ef4d73d98475dd89cd60ba83b0d0727864_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:168263642ab86ee7ac92748fd442782b1409a096740d9c0ba40316c0237e923e_arm64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3718f48be5a16b7dd4122a718b1130147ff457e1faf276c76e2ad135f96520e4_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:bb99997bcdc193b95fc0f69c6ca385be5cf280656c7cc130f41d10e689f348e4_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f39e994d4730a125f6082fd23f469dd1f84a07b1fad80e7f92089d73a9a6135e_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:3d7aaa57f5e06525cf61e089d1304738db274910397343468c80890510c31ad5_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:586c6612aee267936dc23ed50a3b2d2da22a94ccce8ce670237eeeb9d58ef576_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d2deb0493437f17e558fc718d29642e85c747e180f4b8d6b3ab4e22113c443b7_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:58b6c7752c0dcadbd2ba5d401aac3d7b78ebb9afc7e3933e2b6aebe2ca845151_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:17084b78c9db460dc826d843d3d879ae692ec135f65f21e70c2baa2c7280fa93_arm64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:26352ca63d1dbc94bb6f157cea3de92b7253fb2244cf3c380726b23842f4f15f_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:6da004877da079dea3aef977d5359a2754bfc92d71efda1bdf79d4f84089424b_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ce1a3fe130305c46a01e4932072376fb28c2b3f8daa8ea5ef7451dc9efecf4bb_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:52aa2ce321030da58881149421707f5e056f0546a0866daa193c7b0b9ddb8289_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:bbbfa69c97e73caf65e314bd4df8973818eb4c5a4de55dea460d4b3e83c05b76_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:d680a5fbea5341348e9cd1fbdcb3c7902fbad24d6037aebec5c6e52fa1111a59_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-operator-bundle@sha256:6bed08f9171490b5391a2b70207c077409d91bd4ec891e61c8012c33d8571d6a_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:043110fa2ce430c173f5481dc806432207bbcc755e09730b765ea4e43e722248_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:4c805f4fcb755452e551eff6e8d22ee6cefad959c6fb1b2a11ac2bc9b7f63699_arm64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:508b61598197cfe1c04c5d51b2d314615933d8aebf8af7b0b3b0b9a723aac6b3_s390x as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:6e6bf89076e103ab6a8594265f5b3470f2d7c27c9d6f42f9b252c82089b62031_amd64 as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/odf-cli-rhel9@sha256:80730452c59d5777213e4edc81218f2ca2e033684783ec29cfcd45e8eab58fdb_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
- registry.redhat.io/odf4/odf-cli-rhel9@sha256:b0f3ecb806eeacc4223ea3e2348f507427670b19cbe9cd9b5fc869a44bdcab8d_s390x as a component of Red Hat Openshift Data Foundation 4.15
- +43 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.15/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:22393
- externalhttps://access.redhat.com/security/cve/CVE-2026-42945
- externalhttps://access.redhat.com/security/updates/classification
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22393.json