This advisory covers Red Hat OpenShift Data Foundation 4.16.26, which includes security fixes and bug corrections. Notably, it addresses DFBUGS-6193, which prevents the ocs-operator from using the image gcr.io/kubebuilder/kube-rbac-proxy, and DFBUGS-5940, which resolves an issue where the noobaa-default-backing-store remains in a creating state due to a self-signed certificate error in external mode. The advisory references CVE-2026-4800 and CVE-2026-33036 but does not provide detailed vulnerability descriptions or CVSS scores. The update is classified as important and high severity by Red Hat Product Security. No known exploits in the wild are reported.

The update addresses security vulnerabilities and operational bugs that could affect the stability and security posture of Red Hat OpenShift Data Foundation 4.16.26 deployments. The specific impact includes preventing the use of an unintended container image that could introduce risk and resolving failures in external backing store connections caused by certificate validation errors. No active exploitation has been reported.

Red Hat has released the OpenShift Data Foundation 4.16.26 update containing the fixes. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Detailed update instructions are available in Red Hat's official documentation. No additional mitigation steps are indicated by the vendor advisory.