- Issued:
- 2026-08-19
- Updated:
- 2026-08-19
RHSA-2026:57013 - Security Advisory
Synopsis
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
Type/Severity
Security Advisory: Important
Topic
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
Description
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-8962: RHODF 4.20.17 release
DFBUGS-8003: [GSS] Rook Ceph metrics are not being scraped, and the rook-ceph-mgr-external service is inaccessible from within the cluster.
DFBUGS-7951: [upgrade from 4.19 to 4.20] Clusters with Convergence changes always have nfs driver deployed
DFBUGS-7393: [Backport to odf-4.20.z] [MCG] noobaa-core pod restart overwrites admin account default_resource to arbitrary backingstore
DFBUGS-7380: [Backport to odf-4.20.z] [GSS] PDB is created for rgw even though the gateway instance count is 1
DFBUGS-7318: [Backport to 4.20] - noobaa-core-0 intermittent CrashLoopBackOff due to OOMKilled during object delete workload - map_deleter unbounded memory consumption
DFBUGS-7004: [Backport to odf-4.20.z] [GSS][Disconnected env] ODF is upgraded itself from ODF v4.20.2 to ODF v4.20.7 without Manual Approval when upgrdaing OCP v4.20.5 to OCP v4.20.16
DFBUGS-6997: [Backport to odf-4.20.z] [GSS][ODF] Noobaa DB_CLEANER not honoring set value
DFBUGS-6814: release-4.20 ODF must-gather missing CR storageclusterpeer.yaml
DFBUGS-5767: [4.20.z] Landing page after installation of operator is not correct
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift Data Foundation
Fixes
(none)CVEs
- CVE-2025-61726
- CVE-2026-12143
- CVE-2026-12151
- CVE-2026-13149
- CVE-2026-13676
- CVE-2026-25681
- CVE-2026-27136
- CVE-2026-33186
- CVE-2026-33747
- CVE-2026-33748
- CVE-2026-34986
- CVE-2026-44740
- CVE-2026-45736
- CVE-2026-48779
- CVE-2026-53488
- CVE-2026-53489
- CVE-2026-53492
- CVE-2026-59869
- CVE-2026-6321
- CVE-2026-6322
- CVE-2026-6734
- CVE-2026-9697
amd64
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:fbddea85f951d45223bdeb5870071bfb0937b870574935ef750b8bbb48757f4b |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:ebc44b5e978f00be3360ae06bc28abff97237c7c0cde315f1d0835295e3c184f |
| registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:3a4211594ab157eaf1e9e84f0e036e6c94e272c6adc4887d27acc7da6c25546e |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:b9f41d2684cad7b927677b9c437d392521132b39117fba67e118f5e6476426ed |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:867e990e7bc7e336137046149ef8a8595d25c899118997c1f1d6da66a2d45e69 |
| registry.redhat.io/odf4/mcg-operator-bundle@sha256:173de85729c10897e6dfc4b8808053c17f3f23a6b9c090f85f733b91d5fd3257 |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e54149a0e6b64eeed55ebb0a40266decac1c337488adb64b9a34f4c156ceab63 |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a1e2052bbbd03e2cc956d5465bca5e4b5967480126a63e49380263e4c2943365 |
| registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:0a2df491e16cab5f896d8eaee668b73205a29dd75276a6d5f6691500a552fc23 |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:f91b76dc37acdeab2e7b1df28be954586ee1cea4abd2ed476936a54fb55a66c1 |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:cc227e0660c23a897861a2361f34cee9954a814b9a9e768fdd6d4680014ef739 |
| registry.redhat.io/odf4/ocs-operator-bundle@sha256:7bcf876293eb728693e39b2822c858feb5928ef5d8e6cd40c77bdf8204d5cb8e |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:aa2a1d0291fd19eb160849811ce3536ebcd4a5a452d3b00017cdab42004ddf35 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7d105635d6a5a81c32cb6b04fc1f806b2a7c3628a21f9dfb730d188d725b149d |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:1e0a884a985c6988379b2bcc992e44f04408bba1d8c769467911ed948e8d629c |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:bbc792f666b42c3d1214c211b95255387b68979e9d459b6b523ab7fd23ade7a1 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:b04da82f1c5e6fe873a52246c359a5b604ee04e8ab8987e7394a17a28c80d48c |
| registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:3261a39fd9996af91be790305bbd0a15f633ccabd4ade5b164881e42690e8ec6 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:f5280fc847d46bd0ef5e434e65ff86a68f4d32effce1b01038af2b19cf1911ce |
| registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:3613f888f8b24afa1e9c500ea3a218cdd104c3149bb96511d7caefbd4e1c5a3c |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:35b20b527bba5124c8fe0831ca528e497beaf8dc9efdbab3751c880ff62f8e2e |
| registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d9f19d8442c6a3d8f442ef45b2d4736fa733eeebf75951631c02c5bbdfbac228 |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:a7773470f004e1dd32104617931010c37bdd759028861b424243842cb7c6fc54 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4c90c04cdcd363915f369999ca43fd4a9ebe0a692390038abe6ba6bb106c30ae |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:248a6db960912cb9cacfaa6ee47afa91edab3c14ad8c90bd2acee4de3abfa98f |
| registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:3d4651674ec3e8a0ca9e9d8c9e69a8420409720840ba63f770c4a674f9b22547 |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:c5c03ea56fd735f790d8a8b607554ae1959aaa3325d4cf7ea17a704fc34d9658 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:c958a6ef145dcc7eea1f5d78cb84a9d8bb6589d1e2b5b5e2aa4525c09428fd92 |
| registry.redhat.io/odf4/odf-operator-bundle@sha256:eb9ebeaa4be3cac104c60fbbc65a2d642b1f9acaedfed5107c5a483d08085574 |
| registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:d6381a2640d270208255c8ca172e340f5dee08a94a4768265a7dd935fb6272d5 |
| registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3dbc07c062bc8e34452b532062dc099a190809693173557eb37dc146d4c8c7bc |
| registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:f80c9ddaf5dc749e408ecdf14abaaf57abd93ef2d2f56af800ebe772ffbc269d |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:7c128822dcc99e16890c8c415faf347cb243988a38ff9768ea772d31eebb7a25 |
| registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:e96ae74e5c0ed6e1de6d039353038dd616881dacc4fe7328a94790aed3fb09d7 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4830fc5c3c8ab2194cb3e79c291ed3097fb8c4e3a94e6152715c95e91861f526 |
| registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:1d5ec7478062870b994fa8484de0c1a521eb019d0dc08852b660be2d37d92567 |
ppc64le
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:729588270355013da1d18c819b5f00816fe9881bf20781e8c2214f1f367f9d2d |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2ddaea535655457fa0c0182edd49001701d57be7208567c25c09e513b105bba1 |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:7640ace5828c598f5c5a8904d3f727e20a688fedac068b53e082bd287439b774 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6bc4a8ad857b7e6d41bae3880af59ab951c8c7b3c19d9769d948a990145c57a1 |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:bfab0e055441ee67d729eb7fbaf40631c698f9e30cc0d107370ba7840fba4c84 |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:26d4a52961a3c5938201d859ed24d382932d9a39a306d2f5a8a869faaaed1397 |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:3249ae3bf73e57e0dd9ef60ac2d9087f013132fc34a8c8eeb281c0c755d91f2c |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3ceed72b99b843328c6aecad29a0c30fdc5a610a5f999562ca558d97461abb44 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:964616804b74d956b26ab81c16e993919181624328b7a99ff493a82195cd56cc |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:79b27b613bbd3f3b49a87c28f0896bf2eed7ec2b8589714e8f68432dc13fd3f6 |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:b049f297834a68661194bd662a96ba6aff53431240dde5998057cf82a369cdf6 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:60caaf10120dd61adba934b8d46a6f4457d161451fe4a0eea8ede8c3d5864de3 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:814543b3e9560d16490853457ef425cb969d279271628fa0f1eb970ea52b1a15 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:16c8004022b5858375e59354b91fb660ab073caa2878849d853c056f94d60f6e |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:cfb158e62e3ffe4b6411525c476c9d98326e32a05a9431ad690cdb05a0139daa |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:44491984474490b37f5ca5d6627edb5e48e4e115296db21f7fde9835d1170428 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:8aaf626e3b73199ab5c854f180e76b57061a6cfdaf0b4e7834882e72380bb5ee |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ebc69f40e38d4ded3ea5ee4f056ad9949d271335d0ceaf3145aad76c2cfaa6fd |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:b350d83795cbc1cb433097d67f257414246472671546dbb6a8c1d52c940bf184 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:94faf586812c9785d941ea65c93a8d68cad8af4f61cdfde0b72b715524c7d695 |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:57f43bbf2f14ebb707fd4349e34fd8ea00a43f322787683400121973585b6118 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:50154bb08132c59ae1a8e573c494e16c32e03b3b66b988dc29e916105e0a186c |
s390x
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:80b189979e7cd53dd6ae95756e99eac30d0a9b9a9d252e8b06a8d9b9bfd57ec5 |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:3afe44be9ca582caf9a9a87ee4a4aba0b649df8d7e268110ded40a6e684b7bcf |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:ed7de6628ef5e48f8b098eb15d2c44e486e6824421ac8411f348945548b02fb9 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:ad7bb1401da598b30f797da3e9e19f94c19ab951784b1bf3456201ceac58aeb2 |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:c06cced63171c0ea23c249c696b76cbc9274565ae6f8e09539a171e3ace97a05 |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:919998aee33c22472d4080d24dc6235c5daacdeed952db4f95a41727989ab4c6 |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:662911b1e3897611a5b2161a4780f4d96444e2a1660f4c2663707a8d0b3a2701 |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:4eae99cd1dd66c3d98bd3cca59f72d70d8d23d295c1db3e3664861d10a914186 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:e268d877b37437119f1ac76c2f117483c39099284dfb6a0bec7b522d9986a4e8 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:525bbd9528be9ccd5b805e56bd285d72fd7c0345bdc3466b7b998a3500ec4364 |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:37aa8455fccc3430efc13e7096d1e296402c97d208dc70c7d820afdf59732c08 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2e3249889ff9fe469d7e2c820d8753d060fbc913ef16e92a8fd34426219cb896 |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:264dbfd043c2199570927c6c12f5e25ef022a2f209c64aeeaa7b76590415bc1d |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fe9b63b081eebb2f650bca25df50a08416f4c79080beb72d59b99b7e5da12143 |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:f8115f39a5dc6fb12d35614e58b7638711a6637f6fcb8498a184359c6e0edd1d |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:fdd2aa79983d3cd805a39331a09776c62d701900936a95386e19b2942119f703 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:b5a54e7c202ccc7836b127a8519ab8a23a5530c97fe84df36db61057fb0a50a3 |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:872f8af911d4b0f37f7f70488b9297faa7e0fc1bdfb2988b348f2fce83901818 |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:58d50a85c2fb00c2074f6cccc0e5fde805e6720825ae6fde69924973968e58c0 |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:b4edcaa47a03afb2d90dc16b80e093b69255287aa3719088c25b5204717277dd |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:ce8ac2c26e6ee692fbef22a055427309b8365afc902a9ba3cbb20cf5f901d3a1 |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:47feac82d527a95527f963b30eb3ae543af88e0e41c73ec2c5c4957718889ce6 |
arm64
| registry.redhat.io/odf4/cephcsi-rhel9@sha256:97618364f635a8f2fc23a70b9eaf6e3f8b924c581b336a45f5f53681d201d3c5 |
| registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7757463b71023645bac40673d6684a7dcbc479e11ee19bf33f37daf2b950f98c |
| registry.redhat.io/odf4/mcg-core-rhel9@sha256:135f6dcd4a8e3794c1f52b55dc52c5d1fd94ee0bc1715d95753b50838ea01f83 |
| registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f570dff210dcda77386009de06765a7cef1aaba615e3311bd0a8928409e5175f |
| registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:bca244dfe6001e5d68abf5aff64dc1547044f8c1404b39c908a59562ab38b401 |
| registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:5bae08fbb70dc1daf651166082f147734491042f8e42aa0ceb496eb6b88c679a |
| registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:9de6271a3e1615c9f6c40674123211af1a22a010e4d13e16bcc9625c709ccd97 |
| registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b30fd486e58545561bf9a3e052e1921d6453a0ef71782bb03051b7e90424a3 |
| registry.redhat.io/odf4/odf-cli-rhel9@sha256:07dc2ce83a19c2c2051e13d7874c36ff51984113162e8f783ff59e403cd6b791 |
| registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:fea362f3078d23a2240b1976fae2f9db4f4dda35c9252290337adc6f8c298daf |
| registry.redhat.io/odf4/odf-console-rhel9@sha256:bce4ea5ebcb08d63d1528b3af990d937f6bb2550b3dba30139cb457b03d0a388 |
| registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:00bf567f7b0a260d14245a995aa3f701a18f912c771abf4b3a03552b40d5f84b |
| registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d39d3c068897efc2ed81a8d7ef20079d5d73d6c31c76283a84fd04ff4cad7b02 |
| registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:790932d2c33c9e42d189c82dd42716879e2c17ecb6b295fd5cb73978e6b5e4d5 |
| registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:d847be045781c6c447efb99a6d9e105873e743d75212be807a58de21a4eddd96 |
| registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:65e99a350340cc4f9193107bf5ea8f6ab58e88fae702deb533296dcf04eae483 |
| registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:66235aef12a15a506e2dfbfae79193fa5ecef6e4aaba44934d6e33f7b0084590 |
| registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:8b75245819ffec3c1461ecdd7f5f8fc55492fe34032d211c7bf04d97b3f76168 |
| registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:33ef21c6eb5ffe91a5b9b737ac307b74feadc3495df9710e6bfebf6c9178a98f |
| registry.redhat.io/odf4/odf-rhel9-operator@sha256:a62d67f1567ed9cc44cceca4fb0216d197e9141e4c7b39133ec85ad6c468e54c |
| registry.redhat.io/odf4/odr-rhel9-operator@sha256:7c9251fb4dc8e63f5f7d664c86f16e2e8b529862ea1606ca37fe6e6dbf4c987d |
| registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:e69499da89281c5b4ae67d17d21ca675b3d0f61f7e6ec358ed55db4d662d3b0c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
