RHSA-2025:0164MediumCVSS 6.5
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.9 Bug Fix Update
🔗 CVE IDs covered (7)
📋 Description
CVE-2023-26136 — tough-cookie: prototype pollution in cookie memstore CVE-2023-26364 — css-tools: Improper Input Validation causes Denial of Service via Regular Expression CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2025:0164
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2219310
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2250364
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2310908
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311152
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311153
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311154
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2324550
- externalhttps://issues.redhat.com/browse/DFBUGS-922
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0164.json