Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.20 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.18.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-6235: [4.18] [ROSA HCP][UI blocker] Broken Storage System wizard DFBUGS-6185: ocs-operator should not use image gcr.io/kubebuilder/kube-rbac-proxy DFBUGS-6172: RHODF 4.18.20 DFBUGS-5939: Backport to odf-4.18.z [External Mode]: noobaa-default-backing-store is in creating state due to "CheckExternalConnection Status=UNKNOWN_FAILURE Error=SELF_SIGNED_CERT_IN_CHAIN"
AI Analysis
Technical Summary
This advisory covers Red Hat OpenShift Data Foundation 4.18.20, which addresses security and functional bugs including a broken Storage System wizard, improper use of a container image by the ocs-operator, and issues with external mode connections failing due to self-signed certificate errors. The advisory references four CVEs (CVE-2025-61729, CVE-2026-4800, CVE-2026-33036, CVE-2026-34986) but does not provide detailed technical descriptions or CVSS scores. The update is a security, enhancement, and bug fix release for the 4.18 branch of the product.
Potential Impact
The impact involves potential disruptions in storage system management and operator functionality within Red Hat OpenShift Data Foundation 4.18. The presence of multiple CVEs indicates security vulnerabilities, but no specific exploitation details or impact scenarios are provided. The advisory notes a high severity level, suggesting significant risk if unpatched.
Mitigation Recommendations
A fix is available in Red Hat OpenShift Data Foundation 4.18.20. Users should apply this update after ensuring all previously released relevant errata have been applied. Refer to Red Hat's official update documentation for proper update procedures. No additional mitigation steps are specified in the advisory.
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.20 security, enhancement & bug fix update
Description
Red Hat OpenShift Data Foundation 4.18.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-6235: [4.18] [ROSA HCP][UI blocker] Broken Storage System wizard DFBUGS-6185: ocs-operator should not use image gcr.io/kubebuilder/kube-rbac-proxy DFBUGS-6172: RHODF 4.18.20 DFBUGS-5939: Backport to odf-4.18.z [External Mode]: noobaa-default-backing-store is in creating state due to "CheckExternalConnection Status=UNKNOWN_FAILURE Error=SELF_SIGNED_CERT_IN_CHAIN"
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers Red Hat OpenShift Data Foundation 4.18.20, which addresses security and functional bugs including a broken Storage System wizard, improper use of a container image by the ocs-operator, and issues with external mode connections failing due to self-signed certificate errors. The advisory references four CVEs (CVE-2025-61729, CVE-2026-4800, CVE-2026-33036, CVE-2026-34986) but does not provide detailed technical descriptions or CVSS scores. The update is a security, enhancement, and bug fix release for the 4.18 branch of the product.
Potential Impact
The impact involves potential disruptions in storage system management and operator functionality within Red Hat OpenShift Data Foundation 4.18. The presence of multiple CVEs indicates security vulnerabilities, but no specific exploitation details or impact scenarios are provided. The advisory notes a high severity level, suggesting significant risk if unpatched.
Mitigation Recommendations
A fix is available in Red Hat OpenShift Data Foundation 4.18.20. Users should apply this update after ensuring all previously released relevant errata have been applied. Refer to Red Hat's official update documentation for proper update procedures. No additional mitigation steps are specified in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:17547
- Cve Count
- 4
- Additional Cves
- ["CVE-2026-4800","CVE-2026-33036","CVE-2026-34986"]
- Cvss Version
- null
Threat ID: 6a16095be29bf47b50624919
Added to database: 05/26/2026, 20:58:03 UTC
Last enriched: 07/30/2026, 08:58:46 UTC
Last updated: 07/31/2026, 19:30:09 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.