RHSA-2026:56366 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-7382: [Backport to odf-4.19.z] [GSS] PDB is created for rgw even though the gateway instance count is 1
DFBUGS-7005: [Backport to odf-4.19.z] [GSS][Disconnected env] ODF is upgraded itself from ODF v4.20.2 to ODF v4.20.7 without Manual Approval when upgrdaing OCP v4.20.5 to OCP v4.20.16
DFBUGS-6996: [Backport to odf-4.19.z] [GSS][ODF] Noobaa DB_CLEANER not honoring set value
DFBUGS-6815: release-4.19 ODF must-gather missing CR storageclusterpeer.yaml
DFBUGS-6704: Backport to odf-4.19.z [GSS] Unnecessary OSD redeployments on 4.19.z upgrade for already-encrypted OSDs
DFBUGS-5636: [4.19]Topology awareness issue
DFBUGS-3947: 4.19 [RDR] cephblockpool radosnamespaces contains "failed to retrieve mirroring pool ocs-storagecluster-cephblockpool" message after the uninstallation of DR

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

• Red Hat OpenShift Data Foundation

Fixes

CVEs

• CVE-2025-61726
• CVE-2025-61729
• CVE-2026-12143
• CVE-2026-12151
• CVE-2026-13149
• CVE-2026-13676
• CVE-2026-25681
• CVE-2026-27136
• CVE-2026-33186
• CVE-2026-34986
• CVE-2026-42342
• CVE-2026-44740
• CVE-2026-45736
• CVE-2026-48779
• CVE-2026-53488
• CVE-2026-53489
• CVE-2026-53492
• CVE-2026-59869
• CVE-2026-6321
• CVE-2026-6322
• CVE-2026-6734
• CVE-2026-9697

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/