RHSA-2026:26413 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.19.19 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.19.19 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-7063: RHODF 4.19.19 release
DFBUGS-7062: [Backport to 4.19.z] ODF Console is breaking
DFBUGS-7047: [Backport to odf-4.19.z] Update nodejs from v22.11.0 to v24.13.0
DFBUGS-7017: [Critical] Upgrade ceph version to RHCEPH-8.1z6 at ODF-4.19.18
DFBUGS-6845: Backport to odf-4.19.z intermittent S3 upload failures (HTTP 500 / InternalError) when uploading files to NooBaa buckets via JFrog Artifactory
DFBUGS-6742: Backport to odf-4.19.z ODF 4.16.21- noobaa-endpoint crashes with Exit Code 1 due to unhandled AbortError from @azure/storage-blob
DFBUGS-6488: [Backport to odf-4.19.z] rook-ceph-exporter log causes huge ODF must-gather
DFBUGS-6461: Backport to odf-4.19.z [RDR] Partial s3StoreProfile missing in ramen-hub-operator-config after upgrading hub from ODF 4.17 to 4.18
DFBUGS-6317: [Backport to 4.19.z] rook-ceph-mon-endpoints is overriden in external deployments
DFBUGS-6177: Backport to odf-4.19.z Noobaa POD keeps Failing when Clusterwide encryption is enabled with IBM KeyProtect on ROKS Cluster
DFBUGS-5903: [Backport to odf-4.19.z] Ceph PVC's not provisioning or mounting after ODF v4.20 upgrade

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

• Red Hat OpenShift Data Foundation

Fixes

CVEs

• CVE-2025-61728
• CVE-2026-22029
• CVE-2026-33186

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/