- Issued:
- 2026-04-30
- Updated:
- 2026-04-30
RHSA-2026:12277 - Security Advisory
Synopsis
Red Hat OpenShift Data Foundation 4.20.10 security, enhancement & bug fix update
Type/Severity
Security Advisory: Important
Topic
Red Hat OpenShift Data Foundation 4.20.10 security, enhancement & bug fix update
Description
Red Hat OpenShift Data Foundation 4.20.10 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-6171: RHODF 4.20.10 release
DFBUGS-6016: Backport to odf-4.20.z [GSS] No public access to buckets after ODF upgrade to 4.20
DFBUGS-5941: Backport to odf-4.20.z [External Mode]: noobaa-default-backing-store is in creating state due to "CheckExternalConnection Status=UNKNOWN_FAILURE Error=SELF_SIGNED_CERT_IN_CHAIN"
DFBUGS-5818: [Backport to odf-4.20.z] [IBM_Support][Fusion HCI]"storageclient-xxxxx-status-reporter job" doesn't inherits the tolerations defined in "ocs-client-operator-controller-manager" deployment
DFBUGS-5801: [Backport to odf-4.20.z] must-gather causes default RGW pools to be created and PGs to be stuck at 1
DFBUGS-5115: [csi] Handle race conditions during relocate/failover of RBD based workloads
DFBUGS-4747: Unable to select NAD from dropdown list when creating storage cluster when using Multus
CVEs:
==========
CVE-2026-4800
CVE-2026-34986
CVE-2026-33186
CVE-2026-33036
CVE-2026-27942
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Fixes
(none)amd64
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:dfdf81ab0ca1b4c8155b8b37db728aa37c3b708e8621995da9cbd576086954c3 |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:b16e684d89de40f241e55d95da5f4fccc66822a660e5acd3be981b71b5057702 |
| registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:f399b7669f82d8c7261202abec0cbfd3b2fac76709a70fb2a513b4b11fade258 |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:7248ed40e12d7fb5881f9d76aa01ea43a3095c9ecac5854303f732043ada3917 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:d0645cfddaf15cbb47ea1755ea118e607f11b4f32ab3fb4f87c53b52de7bbcdd |
| registry.redhat.io/odf4/mcg-operator-bundle@sha256:bfaf01516833acaf30eb30165f66687f122fa5fa5a66d87ff623a5c9eda9faf3 |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:cbdb7a6550b3723f7dfcf5abfae878860c6101df8a6429a596c5a0c58486c3bd |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e6fc86165dcd9f9239f11d7792cf51e84275091b7864c7b3cb24f23a33f5aa2c |
| registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:d9dfc4f0b824dc259a0b53d143446a67a9356dc28cfd78e3e3ed452b24b98e5f |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:7d523dd4c352ef043c07f9810123e6b47e742f397bdb9b1cc4e08023b227914a |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:f6300b99193451cddf3ebb85d90bcffc7987cc7979e7769129e8a71bcc0d483d |
| registry.redhat.io/odf4/ocs-operator-bundle@sha256:4d9bae0cd399ae2f3abdc4f6dc53eca6c71fef9c7d921eb39b9d3f97ecad35f1 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:7bb28eb1a25ac829ea643483baabbafa2ea112c17120a4c53282dd0f97ca63ba |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:277d1eaae6422e7f41455d99758ab29c46c4821fc8cd86bf10926aab6d951a2e |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:09ca4236d6a93ebd832a34c1dbe7d0573ca3ebc59cf8dcc022a8f488621563d4 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:a1fcec9d7bf0f9a8b45b1c09e1ff1243b7ee38b84ed2871e51cd0aba73d70ad5 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:1e3aa2c95f6f35c8e8b9b39c5be3d3973d5286670753f6512681c138ef607dd3 |
| registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:4d780ab20b7998b60929a666468ffc046d4666403abfcfc01dd7b5b614d42890 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:6a887845fef9147f78cfc7b4f1fba122ffefa12752946dee511125f0c0b55596 |
| registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:c3501a4b1fd5e64bad66d33ad935dce0fcf0ce3f93a675307de24e9d28acec62 |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:854c6d155c6442c99aec35ceb552235987d1de7756b2d9c72b206665bb01e205 |
| registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:eae7a90a03414eef2ab3362a25b4b9d413e538a4eef7d47dc280de5debad8199 |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bd3a127dfadd64db95256b3f3f59367b4c96a55a9eea8e1a8f43e9275a182db6 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4646ea21ea9ccc878d00b2e80a0907b86f1f040e33e3eedbf73f00fca30f6afb |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:d56bc824fa29256432ee11bcfe8f02470ea26426325e051999850c060924b303 |
| registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:c0769c4621ab8938cfb2b944667688672f91b876b7ef18049c3d3747bc18387a |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:9f35ca7b6fa656d736212c67542a90e2ae8c309ae12022069bac2b2e15485e3c |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:fd0fb5a3115891a4dcf5490c0367b39881a6b61ad88a79296db1244d7e6004ef |
| registry.redhat.io/odf4/odf-operator-bundle@sha256:10e60baa58116db95e0e3b6c40dae2cac88f4644a3eaf97c083a75e902b17efd |
| registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:20c6adec557c3cd67cb1d12045f6f5fa7e963c55a7d46b4ef71787dfcc5f57f2 |
| registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:70a9b212fab45493ff6f0b4c0fbd9255111d656463843b111f292cbe2c33a055 |
| registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:3a5201adc62745a4c9a3656653677e77ee941d6aa2e7b2de6d4662c233341ee4 |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:6cb63f18acb165bd9589b128de594240bb4f7f1a0183fa63c72377747109e916 |
| registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:7ca2fba8c84300eb2cdefe81694a0ed353c459e7756bf20899458e0e00647ba8 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7c77a79652c74698069c7c3564f11af4813a1d89598e64756113b9854c547658 |
| registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:e7983abe73794c327473cb3056d298d7804cf5c81309e6e7a097a273ceeabc73 |
ppc64le
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:1838b85d294f260d3cbbcdeabb19bcd0c3fb1f0ce31c5676dfa48b10ad8d59b7 |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2cebd0dc24a731f2c2d33a7b1930d9bf65845ab83817775d378c07630a1e55c1 |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:5516d05155406fa1183a4f913d420ec8c382b6aeeba2c69c0184dbdf78e95eb1 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:1ed70f06ed113964103868d57e983e06f1473500040d2d6c0a5bd27e2385bf7f |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:459ee750a0ab1209540ad9c09b090beffd5da246aeb7171993c7812652cfd82e |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:dbf5873f3b7025e31a09a502da82a0c2a49ffd636c2f1186a418b1b327c3e30f |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55c1db11abb65030a27ace0692b24ac91d591fe7279cc699647bb7e47377ee46 |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:33524dbe3e6a8ea5a4573f54ac87c9333a321957e2dc8ed5b2ed4fb243e27415 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:bd30dd3c0f10a7419e36a029680d10d6f721e15ea33cc4ea4d3cc41a287ece36 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:b2f540a01874e37e654d6fd6b3b82cf44e5b1f2b082204d7acd6238e342967d4 |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:d669926876f84572caa5a621f7ee9235b1053c45de194b7860b2e1395ebc8082 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:c8f37c4f2c9b9514dfbbd9c8b9750e4e9ca88dfff344f9cc1157906d5629e6c0 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:52cba988a8921d60c6df8696ade7fd4d1821bfae7413c1954c66c7d2d468950f |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:28e0cdc61c5a12d138e66fc6bdb4ea0030caa5cb8b034b76ea67bba2b5048dd0 |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:64cdfd8f4b7c842b988a11903cdfaeb4baa2d2f12fedaa096e6ffc94030a77ad |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:156811bdba65e7ced33bb7d3ff71506d1d78c2e2f0fda3bdd01accbb094acda6 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:902d24cabb545dd2c3733f9e581a667e42d9c037e1b36ced286bbd33a96a72e0 |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e9c762bc0f9d434b26c6b3bcbda8497ece5fd4950175ad5cf2a5644d6ec107f4 |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:cbe10b9fcd98c5f0664d8da1721d5b1f5716f56235b787644ff679c8c7cf5e90 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:b196a7facda4b3f566f24b5db7df494fb0d82f0dc5b5f9afa5cd133e01db5e3e |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:28a44bbff9dbf22ca1484307315486be544db85b7f360c14e088b9773962ee7b |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:57885eca4ccdd9d8aadf44bea1820c9c8657f82ea2f6b86404605306a867c77e |
s390x
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:db57ed5bd968276e033a68a90f369dd41708dc6404db38c1d9b2a07a8327499a |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f9b729a5ea810214412e82fab3bfe36602f6cba9a07e6eb0bc2032c5dc556e17 |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:411aa11f920b73eb4cdf4afa7948e5e3bd161e4f8068b8349025368ee0806013 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:326f6201fe88992855a8f945f4c40f62d1a2e8fb83c38cb77b769b2889627f4e |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:dfc04028f84b17339c8950c890bd27f55169e3aa60b9555fea15f2c2cb720c1b |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:6bcaee8923f89346dad8e9830cf17e115c86668525f644d11fbaf9608b4df9fc |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:99d3ef22e7c1fb683d763fedea4c717cc76179d842d87cfc4c4d785c079d100a |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:290886aae2f0bbc4e6f1f467a0e0d3c97b0dc9b58a69790e03a89e4f48313a84 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:b6b6acd8570515bccb7c0cf73f27ad5a05e1f7f345b70103a8b3d85b5ae6ca50 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:94a3152a0b5e36e451eeaa5ea7c4e3809e36c5c00c18374f735cbed8a1822afe |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:e238ac1267655df4fd45ebc66439868db43eeaa5bc433b3dfde5cc22b2a20232 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d219427149a475f140e807b8857be4f02e36f8d50cf18efa6261f96d644f0fb7 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:0ace2dc69d65bfc51b7880e7941c074b042ce0c9a49f34206ae8ed3b7a1cb025 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:c7ca47572158a28244b3d7499e34dfcbc594fd33486d04a874208ea5ad89e9a9 |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:d6c2411860abc7384d952eed842f476458f3b39390135265b9a06cbc1ac60a35 |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:c809f04640fa5e6c5fc8e9f790aff4815970858c8ca602c3d4df8d8419938b72 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:bbeff98f4b1ea5cdcf1caa48e4c4a4759f26bd842419504e5b1c8052ec3f15d4 |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:214f23d8bf8f2bb65d5acabed9e472273e2c1a7f491bc4a1160be00271c4d490 |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:00f2a47ffea5073c05243284e5ca20ac857dd32a26dd56accb1a56582dc76932 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:7ce08cf45e20158ad659f4bdb6dbb6484a571b80d527d5c45c9c084e9e952561 |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2ae238f722ac958428aa2940da68411f2f32d50f13cbcfdd69b6f69258ca996 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:b388ff69995a583fb53ceb606a83d6a532751cee5480ef96d7a330a1a7b20429 |
arm64
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:6dbbc46f47994ad8bcf29f040b64a9b9c17c161ba9babfea3ce1c8a15fec32af |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:54beb2645e89c0ad54c9d454cf9976bbdbe8d39f7de7087a99d7a5a0fa8db535 |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:ea7c225e4acb2eec25cb48e6068c08ae077beee67458ae58e3465851940fd81d |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:40b71d0ac98a372943219f0a138dc08d7f4e6d3c4337e0787463f86b4bb28c07 |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8427b24d33a5f1c51e1314194be758c501be31b0b5ec53f256871a0d8dc82621 |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f567517ba81297b4be348c9fe9960d14b758ae2fb7b0c7d38389b05bc445f86b |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:6df05909b32cea6072f7e93f62ea6092dd6644505b7c377a41b7eafddd98e957 |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3acdc5008849e5bb20a2406aa528404a2a4eec7a89fff16f12ee8cd23c87d036 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:efe81953f21b32ba1b29eaa92d2244dab0a9ea284ddf7aacc61e74100585aa02 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:f72bfba5f4053f1b391f7685dc9ee695730fd31e0bde1eea71eb06e4c6d4cf31 |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:4d6fa3682bb01bd64a39783effb46db3b89c36a7d7c7f3e7823aa16e1e0cd72d |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:bd3d9988d56a356ce751aa23a13629b040c6a640510a62d9f44ba2ec6638f42b |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:663d9f1fb160f3decbe4632c10d7bcc9d5199e16f4852b04c5ff0c6664dcf3a6 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9de6f10311e67ba6bde3fcf931f9897eaeb57ff913347e5de56395325996fb1d |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:d8ff504a5f6ca122aa77e14747f84a83e364cc66bef41b15c74728aca04eadcb |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:31bb2758db9da44709ba59570e808b82a3458addfa513099523bc7133bbad7f6 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:45b498b5de373bf3a7101d76934b3f76408622a7685cbd95eef95cb11fe19bda |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:6386865e6ae9af348a73037f84f6e54966db2dae7d92cab9a60e4a84c41a4d8d |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:f383e1eee810782738f72ef20199b4aeed135a0b212a3d2643fa819ae22c8fb4 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:fc4aac367b91ca2b4f32ee35a65c6253b56cf46a1a5e306751c9c2202d38e9e6 |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:88cd3da421ce5ee14181adf8269b3cd0a3381ee6779389e5c29017a6b2a95615 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:74d3b56ef65426ded5c0ed4b555fbacdc656cd45dcdf8981486e2beb00c5e30e |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
