RHSA-2026:22396CriticalCVSS 8.1
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.33 security, enhancement & bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-42945 — nginx: NGINX: Arbitrary Code Execution Vulnerability
🎯 Affected products73
- Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:02f97c6d291f3b373ecf08a3f9e0b560d932421df0ad2af720ddb4c3ebf819ed_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:95e8db4a580319ecebba02b1b4576b3aa455aef68ba6df750cc839b78e83fb71_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:a18f74038bfabd379689ffc783cc7258f03e6b6feab42e1fbb3a609b00315c34_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-cli-rhel9@sha256:90eaff7808b1c6b16a73ce936306d9f517e2fc21cebc4bf74edcc8e06bc4c233_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-cli-rhel9@sha256:a8573fffeb5bcc26d386dfc8e9b56a8df9ebe1338007c1300f01caaa225b27ba_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-cli-rhel9@sha256:c605a0f0e0077c3b89244087253c08c471239c94668f268a7639667192f2d24c_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-cli-rhel9@sha256:f940b235932f52ae2a26670e15d4ccc698e4c3746e9f3d80b5487ad2374089bf_arm64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:0e1841645525fcffafea2e15c7ebbdd8e7124edbdb3b74aa695eecc27d5a1ba9_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:1b2e626e397c23e3b57026c179ac0a9f368cc96e595f4cce4e9fecb263eda254_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:cba084c880168cdf9aa8d978d76948bac89f44784704354dbecc91775a2c664f_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-operator-bundle@sha256:056ca4ad01ddb6f3c84901dfee78a1f00dc26c9370e70f4034df2813545d1e82_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:2655dd8733c77a3a17fc30e8b4c2944dcb45336a9cbe24ee4dabe0da48bb6a76_arm64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3f7102e69ca64656ef02ac5cda94c0d7f6ac92e829109b08d255081f980fc161_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:e3651728cf2e388192aaaf6433793f861acae1c709fe5d3e115bdcdde609d200_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:edb65b56cfa624e3d01c93e265fbc650fa0ab090a4b427554d89866dc11e7013_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:964f8c3af359711e5662ef1cf90df0ceffc7441e04fdf692cb05853f691b1bac_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d5effb7ba002266c2f7a61264374add698e0f3ee0f370c711e770ec26351d491_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:ea67e3641ab7a6ea6184d90902619e722f28cbdb32c1b7bcc8078fd615626426_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:2ed22d17e0d6e670383cfe6094a4c74b5a029497d587c34458a0bdbfa9c8fe4c_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:128a832f1e182bf37ac95a2294021e7d58c22504e60e16906aa7b210fba5d8fe_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:216e29b8101bffc5e4be68e82b2b1ffb2fb323fd99214750ac51bec47e5109cf_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:cdff8de5a8ffa6ea2415082018b343e8321d7948cc8401a3edfb35e3cdb15fcc_arm64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d7b3e88d4e92ca2d08863bb6eac8771ab1a163efee3f4736400ac51a46914643_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5ebff75ca36fb37904f0d57c6b8206fe6759ad53c857a8e9200ec526bb89b868_ppc64le as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:66627a5afd54d30f74d1cb1ce9b7b0d581042d644e57a9324b95307fe9b61fc4_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8e8e400d54ba673fd559dc3a7e0c1943cc08fb7377ef4eeb98e43e3ca36d805f_s390x as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-operator-bundle@sha256:0a135335fdaf7893bff4848ff1f0804a75773576ad45ab34fd99acd45012fcb7_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1542a222d60769789d78ab45e90ef3c6ea483c30f49d206e931d18e6ba200a52_arm64 as a component of Red Hat Openshift Data Foundation 4.14
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:44e43ff891a59d33a4d7ee3299960a64998801d7060619e13048e72fbc3ec6d1_amd64 as a component of Red Hat Openshift Data Foundation 4.14
- +43 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.14/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:22396
- externalhttps://access.redhat.com/security/cve/CVE-2026-42945
- externalhttps://access.redhat.com/security/updates/classification
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22396.json