RHSA-2026:56928 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-9558: [MDR]: Post-upgrade (4.21 to 4.22) DRPolicy validation failure in Metro DR
DFBUGS-9404: [Backport to odf-4.22.2] Adjust key rotation mismatch alert to recommend contacting support
DFBUGS-9071: [4.22 clone] - must-gather Helper pod fails with "realpath: /var/lib/rook-ceph-mon/secret.keyring: No such file or directory" causing all Ceph CLI collection to be skipped
DFBUGS-9018: [Backport to odf-4.22.z] minor odf-operator.v4.23.0 failing on OCP 5.0
DFBUGS-8998: [Critical] Upgrade ceph version to RHCEPH-9.1z1 at ODF-4.22.1
DFBUGS-8996: The console pod in openshift console is continuously restarting
DFBUGS-8956: RHODF 4.22.2 release
DFBUGS-8896: drbd-setup script fails to pull odf-drbd-rhel9 image from registry.redhat.io — unauthorized error
DFBUGS-8892: [backport-4.22] ocs-client-operator fails to find CSI images ConfigMap on OCP 5.0.0 — blocks entire Ceph CSI deployment
DFBUGS-8890: Failed to install ODF 4.22 on OCP 5.0
DFBUGS-8882: [TNF/ODF-4.22] Failed to deploy a drbd module in the node
DFBUGS-8812: Post completion of installation for FUSION and FDF cnsa-dependencies status is reported as UNKNOWN
DFBUGS-8798: [MDR] [HCI client]CephFS NetworkFence fencing fails with EACCES error when listing active MDS clients
DFBUGS-8514: [Backport to odf-4.22.2] ODF 4.19 OCS Metrics Exporter not receiving Network Attachment Annotation
DFBUGS-8224: [RDR] DR protection for RBD workloads fails after DR configuration
DFBUGS-8201: [odf-4.22] - [GSS] Red Hat Virtualization VMs in Paused State - "VMI was paused, low-level IO error detected" w/rbd Volumes Impacted and Clients Blocklisted
DFBUGS-8115: [Backport to odf-4.22.z] [RDR] [dryRun] For cephfs discovered app in deployed state, after dryRun and abort, progression changes from TestingFailover to WaitOnUserToCleanUp but changes to Completed even without workload cleanup
DFBUGS-7974: [Backport to odf-4.22.1] [GSS] PDB is created for rgw even though the gateway instance count is 1
DFBUGS-7410: [RDR] [dryRun] For workload in various states, ensure dryRun test failover abort works correctly and retains workloads original state
DFBUGS-6160: [GSS] Random Pod delete makes the container in openshift-storage.rbd.csi.ceph.com-nodeplugin-csi-addons restart
DFBUGS-5644: Customer is able to see the alert StorageClientHeartbeatMissed constantly, roughly every 6 minutes it goes alerting and then it gets auto resolved.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.22/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

• Red Hat OpenShift Data Foundation

Fixes

CVEs

• CVE-2026-33671
• CVE-2026-33672
• CVE-2026-33750
• CVE-2026-40181
• CVE-2026-41305
• CVE-2026-41650
• CVE-2026-41907
• CVE-2026-42338
• CVE-2026-44665
• CVE-2026-45149
• CVE-2026-45736
• CVE-2026-6321
• CVE-2026-6322
• CVE-2026-9358

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/