RHSA-2026:22396: Red Hat OpenShift Data Foundation 4.14.33 security, enhancement & bug fix update

Published Jun 2, 2026

Updated

Red Hat OpenShift Data Foundation 4.14.33 security, enhancement & bug fix updateFIXED BUGS:==========DFBUGS-6993: RHODF 4.14.33 releaseNGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)

Affected Software

2 affected components

Red Hat OpenShift Data Foundation=4.14.33

Nginx nginx

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Red Hat OpenShift Data Foundation to a version that resolves this vulnerability.
Fixed in 4.14.33
Upgrade
Upgrade NGINX to a version that resolves this vulnerability.
Patch CVE-2026-42945

Event History

Jun 2, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2026:22396?

The severity of RHSA-2026:22396 is rated at 80, indicating a high risk level.

What vulnerabilities are addressed in RHSA-2026:22396?

RHSA-2026:22396 addresses an arbitrary code execution vulnerability in NGINX identified as CVE-2026-42945.

How do I fix RHSA-2026:22396?

To fix RHSA-2026:22396, update Red Hat OpenShift Data Foundation to version 4.14.33 or later.

Which software is affected by RHSA-2026:22396?

RHSA-2026:22396 affects Red Hat OpenShift Data Foundation and the NGINX software.

When was RHSA-2026:22396 published?

RHSA-2026:22396 was published on June 2, 2026.