RHSA-2026:22383: Red Hat OpenShift Data Foundation 4.20.13 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.13 security, enhancement & bug fix updateFIXED BUGS:==========DFBUGS-7039: RHODF 4.20.13 releaseNGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat OpenShift Data Foundation (RHODF)to a version that resolves this vulnerability.Fixed in 4.20.13 - Upgrade
Upgrade
NGINX (within RHODF)to a version that resolves this vulnerability.Fixed in 4.20.13Patch CVE-2026-42945 - Operational
Before applying the RHODF 4.20.13 update, make sure all previously released errata relevant to your system have been applied.
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:22383?
The severity of RHSA-2026:22383 is rated at 77, indicating a high level of risk.
How do I fix RHSA-2026:22383?
To fix RHSA-2026:22383, update to Red Hat OpenShift Data Foundation version 4.20.13 or later.
What vulnerabilities are addressed in RHSA-2026:22383?
RHSA-2026:22383 addresses an arbitrary code execution vulnerability in NGINX, identified as CVE-2026-42945.
What are the potential impacts of not addressing RHSA-2026:22383?
Failing to address RHSA-2026:22383 may leave systems vulnerable to arbitrary code execution attacks.
What is the release date for RHSA-2026:22383?
RHSA-2026:22383 was published on June 2, 2026.