Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:22390 - Security Advisory
Issued:
2026-06-02
Updated:
2026-06-23

RHSA-2026:22390 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update

Type/Severity

Security Advisory: Critical

Topic

Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-7033: RHODF 4.17.27 release
NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.17/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

  • Red Hat OpenShift Data Foundation

Fixes

(none)

CVEs

  • CVE-2026-42945

References

  • https://access.redhat.com/security/updates/classification
  • https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/

amd64

registry.redhat.io/odf4/cephcsi-rhel9@sha256:f168c8e833efb64ba9a78614d9aa6b7b4a908c57cb48d04c759eb9ebceb78fe5
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:8f3a4a3349901782a805e4f4bd18b75a9ae8ff280efadf791c98d6cd3980fec7
registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:aaf151f3591211c73fad26de09867e218d34880e9128f0a53b510d6b5a289b76
registry.redhat.io/odf4/mcg-core-rhel9@sha256:c5ce0f7d707f1365d7c119f67e7861a838073ee74a8e0ebb054190cd01a3beb2
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:c92235900409b5e521f6005781ae19643422c3e2733d880e0f8ddf99953199e8
registry.redhat.io/odf4/mcg-operator-bundle@sha256:098d938ae393a3fbdbb18a6a1b538a85c1e2af9d1515ba8dd7aa21e5e8908eee
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:4bc6fa225f085e086073a31aaa9648d0e64c1b354ea455489896cab1a3b6b0b5
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e39a053c90b8d0f3ca4dc0657d81e69beecf91dcb449407f1dd655871512b176
registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:8608f34a443ba136d85dafe79c6914be877993c12c61cf7d3b9523623dccae4e
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8a7be14421bf9f2585830e0c2dfefcf45f54cdc73d0a1d627b03f0534215c66c
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1559935f520cad5497d2d057249414b5280d15d3f594b1dfd67e49b8cad59d66
registry.redhat.io/odf4/ocs-operator-bundle@sha256:0b3389fa0e0078cb30b961205601248df69cb966a7182d14a70345b2f4df1737
registry.redhat.io/odf4/odf-cli-rhel9@sha256:fe544ff36c6bb61a3412cb84d549f773a0d93440cb470934aa2127d0f2d7e89f
registry.redhat.io/odf4/odf-console-rhel9@sha256:938fc44b164990273a503c2f7bf6e38de21dd11bf06e916b955dd758108bd2a4
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:ec6853a876226ce730a8d29ffd2a4c65d60e03c5aaadbac13995992658435514
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:e17d18aee2ecee1b1620223110e1e98b95ebf345d48a2f5f756ed5059ecc987b
registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:ae8fbacf5f01ec12d90274c56e27411db4011dcd4d3a0b586cb6650917d217bc
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8c1f6635eb16896b467fa85347352f5bb3f4e8b87b7b15b68e57376e4618d22f
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ade708fb7f1554e5b5c4d005fb7e6b32de48a8beba5a11cfb4ef4111886f665a
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:fd87da0db7fb3c4fbbaa6fb9737baa89e0fc9bce9fb5604f9d85b87c9d5c2dca
registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:04132bdd0e8016f16444cc8966fb7361f1373a8b16ddf4c3494ff0ffd6644bd5
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:10a50a0c94f085228ef9cab677f9705751dddfcaf83cc3ff0db15baba070d836
registry.redhat.io/odf4/odf-rhel9-operator@sha256:76c582eb0a5fa27e35cbd056e4cac215762ba245ca5a4917674f2703d87f024f
registry.redhat.io/odf4/odf-operator-bundle@sha256:4ac88eed3afb38b7168833f31f6c172b981bb2d96dd90a7970740536cf5c6622
registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:7688c80a5dbb7cba4d5bcde973ec7031988cba765951ee5727010db684ecc435
registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:4cc5925098799bda1f3a8520cb0581b814b696f8cc9ab6fe380efd935105131e
registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:0f8f7a06355832b5319979cd36ec862e2676b3dc24930624d17bfd557efbc50c
registry.redhat.io/odf4/odr-rhel9-operator@sha256:492d13ddc8fbf562e75ebae80da7fb52f019b36aa18e431588ef946b7225d527
registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:8f2b7bcd3c1c144be4d7161d2191a0cbc7ed57ad10f4a3f1b2830fbc393cd818
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0eaaabff4662d01493c7109b99c5e3829c46a29914b4ff40061d7b5418800280
registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:1bd841feadc0e1159931492c9520e22bd421bc85d9896485146a0fa30133ab74

ppc64le

registry.redhat.io/odf4/cephcsi-rhel9@sha256:b5f691cca153e4acde6f9eebe391997870f0f73f855b6a582beb1dc3268470d4
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:75937b9edaf7bfb4d0054c14f36ae9207adb91d45440b515d8d1621bd308434d
registry.redhat.io/odf4/mcg-core-rhel9@sha256:4e888b05456042e7e56bb3f6c27c9c2b217a42d65c161c0053e81388dfdc0575
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37ff6eaf55c2cb0ecc7a33a8d27349bee9e38aecd3a7888129fd14838bb96252
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:6a0eb52fed63141de8c52ff57f642ef3fb0115ba701843787224cb14516bb01e
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:eede593837897068f4f3974815045498859d557fb5bc4d2dafc7280e3d90d650
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:644f7e091fd3ef9066e1830297ffe7974bcbffaf0d65935f1ac7cedb69fc87de
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:315b9ebdaded793d062b829a73f0852ec56120769b72a10188a98158c6d8137d
registry.redhat.io/odf4/odf-cli-rhel9@sha256:b7eab75ec7c7d4889f398fb1750b96847fbde2a19aaf10530e9e32fcb6d184a4
registry.redhat.io/odf4/odf-console-rhel9@sha256:df5be9467cf68ecbee2450ebcc8147f3cc42b84ee0ccb5b11bc03ad0f51de222
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:413cb3f51af469fcf0a07255f93eabee9583ccbe89ee2a2cf8e850af132a5aa1
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:eed43610908ba058af2bfd57619553fe1f1cfd470447babb1d65ac02cb1c3712
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:ae2891255d64fc6e1143023cbeac170be458eae403415827d0232fb252323d87
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:2798779daee7b60ab3b5fd45535edbda5708defa26e8fc511bb2196bbc540e45
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:8b08f23413975d42902ac50e10ee678f98c1c27cec789035f7aebc276c8c5ebe
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:b0ee57a89c8575b2947c722ba0c421bbcef60c4a534e5b8e7d0da2cdab89ee26
registry.redhat.io/odf4/odf-rhel9-operator@sha256:0c05fc287981b1a52e533f39efccbf1615de4b8b03a11d2b82a35c85548921f4
registry.redhat.io/odf4/odr-rhel9-operator@sha256:ae6c2ff82f9e7d26547b99e59c01f7b762dbbd06165d99938efd6d131e0c2cdf
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c565c4909a57cd6a83a0747b2dae85400a2f1f6f7e388807ec955a4d9fd1e795

s390x

registry.redhat.io/odf4/cephcsi-rhel9@sha256:1351d065fde22fa6ebb8cb55fbc9f70a677884dad51d75fa947b08602ee65f74
registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:70b50e03c6503aeec7457ef0caafa5dc7fa8d758b5daac75b5f2f32c43ff1fbd
registry.redhat.io/odf4/mcg-core-rhel9@sha256:768084969d3a3129a0cef7514e27e94f3ed78addf8130b0077052779fa3df6b7
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:d8f83fc83ce2d9aff1d054eaa2aaad56355c90bf29c23496c7c31479886098b1
registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:32ae2c126cbc9ac4775221fb4993ca34eee1d6a8977829c0bd1648d400a4c112
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a5dd23749dcc4836ed33237ae9ec9b26a41ecaa44b2c7882e86ddde1c455e8f5
registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:8fe158dc94b79c38a430f7f8dda5429e811849c6607e1caf5cd0b1311a87105e
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:01424c0f97a08cb6ac4434ba732f24e5ec1eb1247f6bc90a7d71d03305dd307e
registry.redhat.io/odf4/odf-cli-rhel9@sha256:bee4de8159b4eab217fc9999be6f7fadd14549253e810ae15b56faee41b1a900
registry.redhat.io/odf4/odf-console-rhel9@sha256:0d8007a6cd713a70299328640d382c6b51de3dc06ea4d1781d2a17f675830a3a
registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:bbda4cc10234aaa3e88c938ff83bc68ea2d4c1824ee9cceec2b2b1d927915d39
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:97ce3daf7d9369497ed844736ed42d61f211513b30ab1eac098687d19fdd6b11
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:13b03f18f22628b98537031d38a525a4bfdc252d8cbbc7dd4d0a489821ecf0c3
registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:22c2b250bf7277fc03f320b591491954521d5f9f45197bc7cac31405c597a907
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:8a604298aea6afb6ca8d652ab62dad82d9222aa4805327eaa6309899dae1a9a7
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:b9dc75cd07f2134cd5cbf633a62eb42a8442c7737052da3928d62cf91799fd71
registry.redhat.io/odf4/odf-rhel9-operator@sha256:647643c0efd72b3773c824944e1fb9ba46d255ccae81012e18cbe943f6240a55
registry.redhat.io/odf4/odr-rhel9-operator@sha256:ad0e8bc2e0877cafc36eb4eb5e8854e1ded5f656f3e534b39ad834650445b289
registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:027bac23cc68ba79d737ce49997e70fb5056f0ed4fc53b3c4e2317a062432a29

arm64

registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:16d735432b21fed4c5071c6975ada04d962338545e6d1d705696560e17c63707
registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3afb42f2893a40b02b89e4bfa06320131b796a955490c51d8dcc2b3f95e07a8f
registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:5eec3a9b38fa1206d3460e0fe39d64bd2d974ac5fdb8ef222ca250b1f2d4ba24
registry.redhat.io/odf4/ocs-rhel9-operator@sha256:7923da6d9c8ca9c0e0e298e4f8e88b1bf2b700b89b905cbda856060cd7a235fd
registry.redhat.io/odf4/odf-cli-rhel9@sha256:25f397a8870352a475f0f9d4729d679aad47bb079283126c3144be9f6251554f
registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:479371eb4566e3b6ce0c2afe51d3662e38848be693dcaec9a0768f7bd52eeb9c
registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9eca648e06559522ef950e31505f2c1241b18d07167fc8023f9c4c72d1d83cdc
registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:c9f67e40100a3c3fdb8d3073a48d2ceb01b8ef0e7f5c5e7f4c24223fe54c8c82
registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:e69a98107e67380c8307b89762fd0c0781ac3eb7d5d6e60ef26a21c1caa8f9a8
registry.redhat.io/odf4/odf-rhel9-operator@sha256:a981b51908917c9abdb02f52ebfcf524115b5c9309b31992af8eaaa8f4b45a09
registry.redhat.io/odf4/odr-rhel9-operator@sha256:24b093af34e75e94e8bce12d1e4892dab9bf06d4fd68e6ab183362cea14ff8f1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility