RHSA-2026:22394CriticalCVSS 8.1
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.29 security, enhancement & bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability
🎯 Affected products76
- Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:168a9b43174beb0c8cdf61cff3f7da33051249337667642e32688d2e1a235610_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:2224d0612432bbcc6dad6787f3f7f68b531cb5adbfcc52a138176150f65beef0_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:b5f417d8c75db7eeeff540fd5e71a971aece96d7efcc96ad37e07d0ec48dc0f4_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:724edfd8081808dd023b4ced9b9af1bc92bf25aeff2f9921a4f5c56270622b59_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:735fe089e2b2e4fbd4569aea48c392c0003817957f18a2d075f76b2f094a1a7f_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:d84c4a4f4b50876dbe848291090f1374a1b920181594cf7eadff51906099c9e4_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-operator-bundle@sha256:4cf4fd5b28f19b04e273113049329ba33a86d291eb53e1a704dbb7a5b979fec8_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:4d338e0bcb02d9e323cfbf03d7f1ed9735e532cfa6426f41517571c785d2830c_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:7dd0b8b54ef1cc7bfcbf8e67d9c62070dadca7908bb613b8fda88df7abbe7bbe_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:e036c4aa2dbd03ba96fbe5eecfcb97c181c802b72eafcf64a23bfbc2e328b9e7_arm64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f5c58c4a7f7abb641d864c1ba5da6e45f8d0e93ba5f7ac90b053c7115b30bdad_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:10d4b22f16ea01847924c29504003ddef4d8d9f2661404fd1c12d1291c961dd6_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:41a0944b41ef31758d80d9afa69ed651cbb38889032600bb10b19be1470c7a4a_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:510c980247fd827ec08d95ce7f3fbb84edf3ee852b98603496271f7cb04fa52a_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b130f8cde5efe1311e2b417194db292368c5f1eceacc159bcd7ad05b1fea1c35_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:3738f0c3e6956c152f197831309326616f3a206606afd12266eb293e84fd3ee2_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ae1a806a57599f929feb97e3d298663d6bc0556fcf840e91718f215b7f816452_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:bf53a364b48ae0580012b3d5d898bcf27b04683b07fcbd99059a4d15cabdddeb_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:fe256e1a57c2c675c9295929091ff878230219e0cdff1e8bb6128d2b229edcdc_arm64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:12249ef1945324f0933b6defb86958003f1d0dca7cab4de168b9059bcffea409_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:ab22c3d453f0565073e857e1739a761281a39d89a625a2b4917ffa8dc721c3ea_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:c60c8deea6c10645badbe37fb5e3d09cb32977678d7735f9652623ebe25f4773_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-operator-bundle@sha256:b29fac159f9744e2b4667193dd77a923c6f3cc3ed31aa246c83b8bbd679ae4f8_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02122b29d756d9de3cf831e5bf4819776e818dc425252effe2073e67fb45d724_arm64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:03940ee7a1ba150cead40a16a8b5ba4cc84d5cee101d404d0b4c2bea34582580_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:10cad5c8d2e8fd2d6bb619fddef0aa77e7e5e4132b65931a3ffaf61741f0cecc_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:5a6b9bd64bc007fb3ec5973768e952f32aa090ef7e068a5822c9e181f2aa5ff2_amd64 as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/odf-cli-rhel9@sha256:18790062b5aa76d69e7559eda315949fdd2dd79b1b7f295c5cbade97f36b14cd_s390x as a component of Red Hat Openshift Data Foundation 4.16
- registry.redhat.io/odf4/odf-cli-rhel9@sha256:1db6469a78f61108ee2b19c71d82b7f8a62f29de954bd881b2b984488d6ca6f6_arm64 as a component of Red Hat Openshift Data Foundation 4.16
- +46 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.16/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:22394
- externalhttps://access.redhat.com/security/cve/CVE-2026-42945
- externalhttps://access.redhat.com/security/updates/classification
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22394.json