RHSA-2026:22390: Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update

Published Jun 2, 2026

Updated

Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix updateFIXED BUGS:==========DFBUGS-7033: RHODF 4.17.27 releaseNGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)

Affected Software

1 affected component

Red Hat OpenShift Data Foundation=4.17.27

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Red Hat OpenShift Data Foundation (RHODF) 4.17 to a version that resolves this vulnerability.
Fixed in 4.17.27
Upgrade
Upgrade NGINX to a version that resolves this vulnerability.
Fixed in 4.17.27Patch CVE-2026-42945

Event History

Jun 2, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2026:22390?

The severity of RHSA-2026:22390 is rated as 77.

How do I fix RHSA-2026:22390?

To fix RHSA-2026:22390, you should update to Red Hat OpenShift Data Foundation 4.17.27.

What vulnerabilities are addressed in RHSA-2026:22390?

RHSA-2026:22390 addresses an arbitrary code execution vulnerability in NGINX identified as CVE-2026-42945.

What are the components affected by RHSA-2026:22390?

The affected component by RHSA-2026:22390 is Red Hat OpenShift Data Foundation version 4.17.27.

When was RHSA-2026:22390 published?

RHSA-2026:22390 was published on June 2, 2026.