Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2025:21704 - Security Advisory
Issued:
2025-11-18
Updated:
2025-11-18

RHSA-2025:21704 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update

Type/Severity

Security Advisory: Important

Topic

Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Fixes

  • DFBUGS-4103
  • DFBUGS-3918
  • DFBUGS-3868
  • DFBUGS-3689
  • DFBUGS-3678
  • DFBUGS-2801
  • DFBUGS-2723
  • DFBUGS-2631
  • DFBUGS-587
  • DFBUGS-426
  • DFBUGS-135

CVEs

  • CVE-2022-0155
  • CVE-2022-0536
  • CVE-2024-45338
  • CVE-2025-22869
  • CVE-2025-5889
  • CVE-2025-7339
  • CVE-2025-7783

References

  • https://access.redhat.com/security/updates/classification/
  • https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/

amd64

registry.redhat.io/odf4/cephcsi-rhel9@sha256:f0b6e7badd62115b27595575c1ff6edf9b7846c6ff3ad9fa03b423d40094816a
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7264546472b9841c67d768bfc24a4120b4d9216de91779a90bf918636d2cb558
registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:88644e786b58be75a739389f3dbb3dd448de59a3c771eabf5838c97887f18bad
registry.redhat.io/odf4/mcg-core-rhel9@sha256:735c774f882177c6e667480bc6528fa7e76a4ce7648fe6d4f5b35891ee43ff20
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b88f11532b8d0c1f673e2c7e454cf7637e9830cf25bdfc61b71fb8b98947c73f
registry.redhat.io/odf4/mcg-operator-bundle@sha256:209f25b8a4dbcaa103c01aba5921d6f621c8832ab1886d575785b3121f231a75
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:a3ac21943ff1a943aee289166e4bb0f56f9691f9301538c7f2f284b0f60c45fc
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:c50de6e5c0a3705afb02e9301073992484bdeb989f9e529920848c609713cefc
registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:91576f6cb1fb49a8f862d8441fcc218131e835230656ed452d37701cff6b3b7c
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:65faa96a422b114af71d7d6212875b0004c5dc3e4fd119cecb3a32bc69800fe0
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:20521dc7e08a973be0e9932fbe28557a00cac4e8ff273765df73d4cfede9aaef
registry.redhat.io/odf4/ocs-operator-bundle@sha256:827429a7901465ca7b6f523f4eef7c85e3e56c3bd63e9919fab18d9d733ca0d9
registry.redhat.io/odf4/odf-cli-rhel9@sha256:b04c09c932c49ca06fa673168576a44a73119af09399968b992e5f78a6b14fde
registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:60585c08e8e59f0b175dd4b88f02e3f2c766af0e18ee9e2c96455b85cdb79c0d
registry.redhat.io/odf4/odf-console-rhel9@sha256:8439ea9b94e6ebe0038c0fa74914c26839532c716c5e25e5f525318be10ca67e
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9034d540c252bb2b0ab50cf6f78920dac40205506e760b2c0207700f7c9df1f7
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:b7e21acb1b51d50e88d92907a82632ba4955aa0a7e8749537cdad88b92513c8c
registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:5f58bfa17b3524b4d639cf0f7af2e188cac2241475cb454720db33aff68fc209
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:e09d93454d49936467874177434f591df6918a828aa09c22e443d07adc716649
registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:4691c364c403b5530b27ee81b21edc4b6e41f4eeb907af429ffd454c40e8cc3c
registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:d31ef7bfd1c92b4bb545e3f774239d183d57d983ca9d1f0b1fd70a5ba1565a8b
registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:bb0f29ced80a4d4fe1518bda27025e39e3da8c24fc6fb00c286dbb72e5d5d4d2
registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:918e79dd2cf4a2922641ca9f4efab7247bec2f7b0cd42bd99765af057dc96f2c
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5d53d05682c689cafed5f0e705caf4713f457552f94cfa1ecd5f3302a7f8461b
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:55f1c53dab3fd98faef3888b81536ed2aab60de198938fdc55afd0eae1d678aa
registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:2ad872d68932818938fa8ac388b86879a979eb242758d9de48b7400b104c5668
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:08845870b2ba26e237a7aee6c54d6689d40512eabc37ce7d11b35a7be15743b1
registry.redhat.io/odf4/odf-rhel9-operator@sha256:fb8c5faf2e866c02d0cb11e71430d95fe3ceab5f15ff2a82be2ee86d0a57de3c
registry.redhat.io/odf4/odf-operator-bundle@sha256:79e05da1099de66a8df5facc98a43c753a038bd12bfec1c500d51450a27f077b
registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:b312cb653c4bf1d47cc3c7c2de725aba4abfc1208a196344648145a1f302f8cd
registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:e2cd149f49825377f26298ce711da016d1a4cba7f4195906bd83fc82afaebdc3
registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:802c99df4e5e1c676284495b64bf5032ff45e48962eb443f08bbf72f5f8eae7a
registry.redhat.io/odf4/odr-rhel9-operator@sha256:c3b69f08c0ca813e311eb84d562dcefa9a6651e605b250c46e6bb70ac93f698a
registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:889f25f1a7db60f5696305af6e21abd2eaa60cf631a452a022ab5aeff2041fce
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:28853c9db8d0a54d42c7f4fcaa591a80dd3e5273d8e463d3496fbe334f9f9721
registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:bb89ac2a12b6419cecf3f4ae8db816c694763e894aaf1a9d151ebc25c028e68d

ppc64le

registry.redhat.io/odf4/cephcsi-rhel9@sha256:e5f93f28233a86972cde565fe3564b47a739ff0d99f0c76d9113c35665dc8075
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e0ddfa4a25cac7836fceb0d2b682534e0be06f92aaeaf46a65b2b30faedf383c
registry.redhat.io/odf4/mcg-core-rhel9@sha256:7bbfb6add95ec966fa0fae6673e7529dab92551726e9a26e3771ce3786ea1aa3
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:9d92d47dc70edaec0317b27b437db7a9a6a22703943c909d08431f702865ef4e
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:73b5c82d9e3b075329c8447404bcd53d1eb6b8fc240218c4b7fd0a32b3ba9fdc
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:88e71661be3cd335ba3b1016fa9dec3301221cfd9b8f708ef1ba1a24d41b678f
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:f8640c08269f281d041f5ffe39db8c4401e361a861ee205740f36969eb8b8aaf
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:6690dad7a1aa2acd59f9be8b61ffdd935b9b6c2db09869c2f207358f72943cdb
registry.redhat.io/odf4/odf-cli-rhel9@sha256:58fc4b8a0f1d84f86547b13136c96a0f7bbb985161dee73702ed91da6a965693
registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:f8b3d76c497aee6a3e865fe5bf3d3af6715ef2a12af0b7a4e07e40bad7d529d2
registry.redhat.io/odf4/odf-console-rhel9@sha256:41b8edb14a2889fb0f495f0223775ec5894130e61d7ca00fc3946af91dc83e87
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:31ad9bb62727dc6c6b5d623e009dc60e2886716cd861c6785f314bf670f2a8a7
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:dca41edb82a492ece6cfc1eba33b4c9dc0c8adcc27e4bd80f5eff776e2711bd2
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:f6adf23f5b01c9b7908130fa37eb131c90132b7c90fe9256aa85efb3bb8cc61a
registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:48c5ff6cef7d6df2220c851dee07213c98bcf8019a03c265a9de040e87401f49
registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:a07d753741e8f635c03ff0fa83ae28a0f8b444678c92e109784bea549a840624
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:665c2cea1e7a00cce4998b46fb6b56284035e7541b00e13fbc0cc78597a707ac
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:f956a01cc746f58def3be5e32aa83463c564bb25dc3641e684e458a5e0480ecd
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:17c3ec46eca661a155ea38b28960c2088c79bff84a8955f117f2147935f887e2
registry.redhat.io/odf4/odf-rhel9-operator@sha256:d708c50c3f1d9c51589917393756b1dd09da88c8a373e206a7ff3d954d9a3633
registry.redhat.io/odf4/odr-rhel9-operator@sha256:40b076b24187050436544f19655b91dcdbc7fb409e98f64fc0498d6fb6dc5c61
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6065f46be96a09ae81ffa461bfc3c2b08bbeefaaed5ce89beb7c3d2775c59fe2

s390x

registry.redhat.io/odf4/cephcsi-rhel9@sha256:c13ea9701e94e626de8bdfe3cc9873f89fd88d8203d95de252955ce0246deb1c
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c7d1fd337adb3a89005b172e62c54d1dcb48498a7687eb790fbdc1c65764e40b
registry.redhat.io/odf4/mcg-core-rhel9@sha256:8c82a478ebc0918907971653269363058257118c6734c6589bb7e13d00c9388f
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:89e2656fdbd5ae931efb120fad7d02ea0b28a9c86b693b9f91f775b02e4755c9
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:40a8b239f6d76102dcc37453bf2884179fd47089e6c4945c5ed7479ca97c8997
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:575c6badfde539d86508446427416b566a7ef1036fbf16fe561124c8775abe3a
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:f0c2d2f7ce2827d964a74db28708627a1336d353bba9d0a73a8337d0e6feb931
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:28fef0042ac3b41929f2f8fe29786eaf7bc38a9ffb6ef4d5c7c3fba275312ce1
registry.redhat.io/odf4/odf-cli-rhel9@sha256:3fce5a9df8c3bc0de1880a6c6e306e6515df91a3e3a730afcbf1399e98771c86
registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7224dca7e4baad69af171bd79a49fd79a8a8cf686aec25d6d33a9266be945362
registry.redhat.io/odf4/odf-console-rhel9@sha256:0995be98994fc88f092a7e3f9fdf3efe01ded631eae774098d5e883c9250c388
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:694354fb3e2505c0b47c296d601b95f3a020df9a1e3f7e4b8ccf759b3073f57d
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:873babd1382127d661d99ee829a6731c2e3610d2e8b7f57c38cfe43964f88b5a
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:43558293aaad9fd082778dfc1f51e0ce0f7bb8dc2e350cfc58bcabc0c5ab3b62
registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6791f5864546a80e68a6a3fd5c7eb1bd3c916784b1c5b9c38ffe83a69a76fcb2
registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:4182d6461a1e2d28e5890e23ff932aac7878470279dae7177636fa62637e6e7f
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:8899629b9124b774fc6cc1e4aa8bd655f61989114f381d0b542b428e7d6000b8
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:a83892802fdc40708c3dffb7f3e13d6e6a6105679a0af15d04aa5626f2339b10
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:527cfafd08926488effb72b844005cb230f7a65646f33ae603a95e3240e2170d
registry.redhat.io/odf4/odf-rhel9-operator@sha256:f72b34e3c5b960e24d3a262ff120528b26d0db357f2e3ed380250206bec00f5b
registry.redhat.io/odf4/odr-rhel9-operator@sha256:c28952c21b682e47b6b2141254df16e36580952de96ea1c43b9f2990cb3aa1a4
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:d958cefdf5e73c063454ac9bc555990e2996e36cc0c9eeee6b686052da2e28a4

arm64

registry.redhat.io/odf4/cephcsi-rhel9@sha256:5c6640ec523c2520e546da3433f1ef149f165ccf907d9746235616de54df9d56
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1d99266aa6792fa96cfb2813b1cb05f699112078fb5caee6fb18011ff8580d0f
registry.redhat.io/odf4/mcg-core-rhel9@sha256:e7660b51f64b60f13c043f40a8ac62028f4fcec734ac01a2e607d65b852f655c
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b3a3c3b901954128b428853805603f0ae09dd5b6401596f65580a58460e308e6
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d9fb83925ac1a019c400b603171c43b23f726dabaf933420a32dfc9d28571d24
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:64ee4a768d5162df9a2817d2c7124ed1a273d2cc3291aec1b3c167b9b764af87
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:6f872af3d35a9618c23b5e9c3ca663a44001764e1f977878e27fcf2a6b726fc8
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:ea61b1528591cdc86e09efc506c4a7eb8ff0e036ac2bcd28eec17dd725fcb71d
registry.redhat.io/odf4/odf-cli-rhel9@sha256:bb98d3240a725a7d025baa6f39e9f14a9e9b781c23b2204fd34f914fd94fad16
registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:b31a37b81859a431afe86d288ecc72f671e62b6aa1ce1f5f0cf2bed982b2b0dd
registry.redhat.io/odf4/odf-console-rhel9@sha256:2a7068bc82b1175ba4619665cd612650c1e9dc3e60aa8d23eda2bd96fd94d91a
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:07782228ecd290f740e9db29bb809e33091e9377307100634319ba5ab814962c
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:c65b4f6ea0fe5b6c6043faa331ad99a48dbcd1db9f7ac1a3b42caec50283cd18
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:290b6b03e8f19ed39693c1d9e1e5107562565adf5318d68cd6ec6bed72e7f63a
registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:0a4e554c16fe5ffe1ac3c08ec619c05b7016394d6ecbc03923807405e3c3db73
registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:b4fadb27268d42d3ba75d73836a2d08bc86466237e13c2cc01f371d185228fcb
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:befe5845eef5b13e652c9ce8541f29e4d8ef2009ff527f1fd80f2495d4b0c8b1
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:1708970ee005a9ebd97c0eb9ce6cce2d9b9a5b8333bf26019d4c7abcbd897ffb
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:56d41a2a9dbb590dbf1690949e16602b38c1a97fd8698272a0f0d5f5f82389c5
registry.redhat.io/odf4/odf-rhel9-operator@sha256:2923697eb464b4509e095f8f8071b816ad581276ede53c4a6602dffaf0a5b357
registry.redhat.io/odf4/odr-rhel9-operator@sha256:7b204b8ac1941635ec0967a77311d151e414e7cfe919106af1de2b8a3e2c8ab3
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7d408f0e8b6772af5aa9c6c85f6d04369c2bf4138ba5fa47ef520c02451be20b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility