RHSA-2026:65130 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-10056: [Backport to odf-4.22.z] [IBM_Support]Capturing the db dump is failing in ODF 4.19
DFBUGS-9935: [ODF 4.22.z] ODF Upgrade fails when client operator completes upgrade before ocs-operator
DFBUGS-9720: [Backport to odf-4.22.3] [RDR] odf dr validate application validation failes when there are more the one pair for RDR cluster
DFBUGS-9561: [Fusion-Access MDR] With multiple apps(managed+disapp) there can be a race flip global vgr to secondary during cleanup
DFBUGS-9401: on TNF - mon-c svc created with the wrong label selector during installation
DFBUGS-9376: [Fusion-Access MDR][CNSA]: CNSA controller memory limit incorrectly reconciled to 400Mi by odf-operator
DFBUGS-9015: [Backport to odf-4.22.z] [GSS] PVPool pod failing to start while nooba operator is scaled up
DFBUGS-9002: [Fusion-Access MDR]: DRPC Progression state incorrectly reports "Completed" after failover while applications remain active on primary site (C1)
DFBUGS-8993: [Fusion-Access MDR][Tracker-CNSA-11777]: collectFsRecoveryData.sh script collects all filesystem resources instead of target filesystem, causing risk of overwriting existing C2 configurations
DFBUGS-8904: [Rook] Operator fails trying to mute a non existent - AUTH_INSECURE_SERVICE_KEY_TYPE error.
DFBUGS-8878: [FusionAccess-MDR]: Add LUN group creation failing on secondary (c2) cluster due to missing devicefinder configmap for compute-0
DFBUGS-8860: [Fusion-Access MDR][UI]: On c2, UI incorrectly displays "Unhealthy" status for Filesystem (FS) resource when status is empty
DFBUGS-8838: Update Rook toolbox to use keyring from volume mount instead of env var
DFBUGS-8290: [FusionAcess-Migration] Post migration Data Foundation service is not showing in installed services list
DFBUGS-8204: [Migration] After Fusion Access migration not able to create PVC using new Storageclass
DFBUGS-8118: [FusionAcess-Migration]Migration tool doesn't handle case where kmm-operator is installed in NS other than ibm-fusion-access
DFBUGS-6369: [DRBD UI] Correct the pre-requisite re-direct link once odf tnf docs are ready

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.22/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Affected Products

• Red Hat OpenShift Data Foundation

Fixes

CVEs

• CVE-2026-16221
• CVE-2026-41178
• CVE-2026-56852
• CVE-2026-73569

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/