This advisory covers Red Hat OpenShift Data Foundation 4.19.15, which addresses multiple security vulnerabilities and bugs. The update fixes issues such as noobaa-default-backing-store creation failures due to self-signed certificates, job toleration inheritance problems, and stuck placement groups in RGW pools. Seven CVEs are referenced (CVE-2025-58183, CVE-2025-61726, CVE-2025-61729, CVE-2026-33036, CVE-2026-33186, CVE-2026-34986, CVE-2026-4800), but no detailed vulnerability descriptions or CVSS scores are provided in the advisory. The update is a security, enhancement, and bug fix release for the 4.19.15 version of the product.

The vulnerabilities affect Red Hat OpenShift Data Foundation 4.19.15 and could potentially impact the security and stability of storage operations within the platform. The advisory classifies the severity as high but does not specify exploitation details or known exploits in the wild. The bugs fixed address operational issues that could cause service disruptions or failures in storage system components.

A security update to Red Hat OpenShift Data Foundation 4.19.15 has been released that includes fixes for the identified vulnerabilities and bugs. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Detailed update instructions are available in the Red Hat documentation. No additional mitigation steps are specified beyond applying the official update.