RHSA-2026:6503HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update

Published
April 2, 2026
Last Modified
September 8, 2026

🔗 CVE IDs covered (5)

CVE-2024-5042 →CVE-2025-22870 →CVE-2025-47913 →CVE-2025-47914 →CVE-2025-58181 →

📋 Description

CVE-2024-5042 — submariner-operator: RBAC permissions can allow for the spread of node compromises CVE-2025-22870 — golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net CVE-2025-47913 — golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS CVE-2025-47914 — golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages CVE-2025-58181 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication

🎯 Affected products103

  • Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:62a1e3e3d10ae3cca4f38b7da160757b26a4ada29ccc0b008db80427caf7bd4f_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:457e7c141b8e04ebe23f8b89da6d2a1a86ea5be46e9893b9207bd16a1e7e92b2_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7e90ed2895f2dd84762ca77fb887b529476bdf79bc5133cb3b3c7dabe719336c_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:86e0fb7a61046341cbe8614394f8784436b2a7b801bd5726ebfa41dd8f27f022_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e6f8fbb23fe367d3b12baec5f97d1958e86e97acfc08acdf42ee5abc37f8514b_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:147e1ff243a190e7db6af5a450ab9ee45a6c138beb1428605296c5a39d8c2cd9_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:6e32194b8d6d0a250eddc0c0bdffd8a31440238b192322d71729abe516c88b4d_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:815f42f1839110b1c7cc9a8c4fb0f9b90031943e4a17d4ecbc6b6b119de6b0ad_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:890c1c243a58fe00759ed5c6e17d9f7cf7043d0409d218d3d63cc5daea6daafc_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:0e1a41e4284bb482365de3b2d2e799fe4b53af86743b56ccae50a236eac23897_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:bc906111eeec8e0bb54c34b0cf6e9695dba4f1a308155e08db9393bea97b6cdb_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:df25b097a7d1772fdc4ec84533f19f3a916de593029bc38845b9d40b2af5142b_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:eea2985363d3e9a9f0c2688456a74948ac10aa8b9c7c4d9fb682d0550e4d64e8_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:e0d11bc558eebdadcc72e3dcfda3ed7aa0e8e7a6c2a6041076875b71b9593fd5_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:23e29e78ab6586896be041a0d759d0a47bf5a3708ba816574bc996baee4af946_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6503afcba4a7f139e8ba17f59edbe0c109c56ecd62e6e249505f3e0a4020b182_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c46d5db93877a5ad790ced226a1b2f5682fe51d743938fa6561cb499397eaa84_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dd381f4da7876e74f697af5f7378e40c427ba77c54c6c5c387bbce366275cd63_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:40b76923ce5df4062bfd3a6c617874e230b4b47cf998081b0c552141d93a81b0_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:472c9719f8368e1e585f8c43890d94ef6581bc5e42ff3bfaea036c6a6f832727_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:4ea89d1bed3fff6035b1aa3bfad77ddbbb2fb42e15aa34011268993c73881e5e_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:96ca51be0713a54f548d57e4ed0681e830e2760cfa5e16d66726e57b5b026aa8_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:a903caeaf7a08ea42f381efc904f7c41e6ed9f539983c8186c9d604677c0e4c4_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0ea607acea5d6ad4aa853cb564e7c5e462c3d5f38814e2097142d44231437bd8_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:18f50116a80c6c3dd2d245733815bdfea65a3f152f7a79484b4ba00f4f4e0022_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:34ca4dda713a8b4adfdd274eaa1d6c8a945ea6f3ca33c3c86e5f5c98a2b05659_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:79804ddcade086223a9491e322ad2212782307afee56e0ed75742e234d595cc1_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:74efeee9bddf97c549de6a6fa454d86f96d3afef8aaf2438b740403181579fcd_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:86470b7d7abb6942782205c9f8097ab9ef1c0841f9e7042faacec0d52560d70a_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.

🔗 References (9)