RHSA-2025:17145MediumCVSS 6.8
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-22150 — undici: Undici Uses Insufficiently Random Values
🎯 Affected products81
- Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:218873830ae5140be10349b08bca288a66cd837d83c1c4eb7026cf2f81dea62a_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0ff71082f0e46ec806cef8dcbef750e02a8b6bce3193b987207ab242e2132178_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:16f2b6bb122078ab5f39e99a6ed046d16f570b813e25fe038d121341541e8e3b_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:8308ddca0ae68f5d26002ce7da0c8a07c5967e03f9e953f9e20015d31fe27b2c_arm64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9d814cd9d871c4d4388ff9a770ccf65c1e2c0b84a9834f41ed30c17088d6026c_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:07b1728430bba1d5972366e16a146cab125dbaf02bb59ce62193630aac925f7e_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:c7838c0b696349f697f2c7a165667e09799ef620a7e712ab715c3af23a40bb1c_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/cephcsi-rhel9@sha256:f608d0f360d923badd100732028f0ed8e4794d42db4406a8d9d1d0716300bd5e_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:120bb47fa2ba5dbfd9aa50dd12cb11476ab0e265a15bd0990b47594902781240_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:145342094b8a2473ffc05f2f12db525712af6e6fcce7761a98c0e2ba5c79233f_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-core-rhel9@sha256:700c545f5a3b752d743d24dca36c9114161329ec3fc0ab4f2b87781870f2449a_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-operator-bundle@sha256:ed9e6e1a9d9d1956e40374800afe592bb3f6e61a7edd16dea844624e869c2ba0_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:276de4f5443c73b4270b4e12dac977376e8ce66a8d560c270cd742c296fe3a39_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:4cd4c22f6abb6da2eb0e927d9ab1ec76bc2300dd6af6c3afc2507d15e8c6ef2c_arm64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b993ba30c006766d1327e047d5744704421eb533dda807ca467091270088f0dc_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f184cb84569eaef3ead4eefd9870e8c7b3d0ca216202b5993004399b84060603_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:51f391c97cc38e78f1eb0efad0d33bee47975acacedf8861832743bc25d5489d_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:b17fa8546693526a09e9098ee2929cdf01dc4c070618ae4301b1b6cd4eae488d_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:c5eee39bf3802d1dcf532ddd9e3593b2ca1d9e806d5967b824f352616a72ebcf_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:7ee82c9cc77e4300268381d7d8a00c343dd26ef1db3dca20683af4054d8d7663_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2a51c331324fe00f1c92cf9bfc9f12e4ea29b34a7105e5503aa05c223e830d51_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2c433aeff6412b71bf40913a4eb2fe49a956d37cb027168f8e17d7c18b67cdf4_arm64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:3da88817c32a6a141182164a6722bddbab9ef9e5d8521f0e714ea526a603b92e_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:413df635042b749eb2fec245263a8f8d96751c4c4f6688f45811e3ce47b2c7b2_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:07ea84cc031e1c88b026fea1dc1a3f4bdc695a828aa56f3fdd896b09de6b8778_s390x as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dc6d08b94339b42efac1dc17e52c483084d59982d3c20a097992823eddd8bed0_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:f8c160c6dbf37d223a567a4407abe2678dfd765968a1b5d56f9905682948a4f9_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-operator-bundle@sha256:dd16c429b2f98f03cf4287beafe1525a72286f17cb0818fb084e46d24f128976_amd64 as a component of Red Hat Openshift Data Foundation 4.17
- registry.redhat.io/odf4/ocs-rhel9-operator@sha256:15e394a4e1ee534d3490ffaa4c43c341a5ea5502c2dd962982edc8a587caae90_arm64 as a component of Red Hat Openshift Data Foundation 4.17
- +51 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.17/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2025:17145
- externalhttps://access.redhat.com/security/cve/CVE-2025-22150
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17145.json