RHSA-2026:41944 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-7342: RHODF 4.19.20 release
DFBUGS-7332: [Backport for 4.19] - [GSS][ODF][MCG] noobaa-db-pg-cluster won't synchronize anymore - "could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed"
DFBUGS-6940: [4.19.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6542: [ODF 4.19.z CLONE] - Provider Server sends sub channel to client only when provider side csv is at the tip of the sub channel in the catalogsource
DFBUGS-6529: [Backport to 4.19.z] maintenance mode is always set for storageclients in non RDR clusters
DFBUGS-6523: CLONE 4.19 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-4768: [Backport to odf-4.19.z]Remove duplicate PersistentVolumeUsageCritical alerts

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

• Red Hat OpenShift Data Foundation

Fixes

CVEs

• CVE-2025-12816
• CVE-2025-13465
• CVE-2025-15284
• CVE-2025-66031
• CVE-2025-68157
• CVE-2025-68458
• CVE-2025-69873
• CVE-2026-25128
• CVE-2026-25896
• CVE-2026-26278
• CVE-2026-26996
• CVE-2026-27904
• CVE-2026-27942
• CVE-2026-29063
• CVE-2026-33036
• CVE-2026-33186
• CVE-2026-34986
• CVE-2026-4800
• CVE-2026-48779

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/