RHSA-2025:1829HighCVSS 8.2

Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update

Published
February 25, 2025
Last Modified
August 26, 2026

🔗 CVE IDs covered (5)

CVE-2024-6104 →CVE-2024-21528 →CVE-2024-45337 →CVE-2024-45338 →CVE-2023-44270 →

📋 Description

CVE-2023-44270 — PostCSS: Improper input validation in PostCSS CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file CVE-2024-21528 — node-gettext: Prototype Pollution CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html

🎯 Affected products99

  • RHODF 4.16 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:3d9ad4ed3af61451da6346c13dff78b6419dee80736f56475ad36865ac95621d_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:48a78055883926781b687851039618a7ca280620cf32df7fb6c30fbc9153383b_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:e11ed7011e43a417ce87d57530141895de76be96bd187cbfb60b811c0e6e16f9_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:97ae939f5da178788bf414736e940f5bd8aa6248b72aad26fca2f223978dcbed_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:9fe05be932ba1b2ead209d963afa118b582b880b694f42075d35990462baf4d1_arm64 as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:c3f2f0285b951f83cd5db8cc29d9ccdeaf1e8ab70b5a16a1010d1c7d3d2fa1e2_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:e8b7ad39bdadeb7953b1bd296f62bf66e56ce8914b63ce93dacbbcd0f1efdd6f_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:2bb2f810a8c9d40f9d2a25eb4d7b28bbc386a99b2206578d6a6e2180e8e0e388_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:5155c134709e46c2081307e128f03e888746e96ebedb0eb349a4c85a12267e39_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:fa3aa70f482e322b288d6ab961ed7964f9d8bc88c1446de3f1d013082b266de2_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:0baf26182bc9495aeacd61b9e2d76cd60aae7a24234ec168f38a591a0637b2ce_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:3e6bf87ad749b323fa1f37e26e7bc8a7c51cb80e4dc40b4632cce2cdccd4d405_arm64 as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:5aa4cb392860b9d385e21e24be8b51eff0d73917de0ff5670ade66664c3b716d_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:67b7d59e43c00a7d6c00f821b805fc485ca8ba78e8921abfdf4f6580ca4f826c_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:5fca32015174d08836048487ed4e03104530ae7de7eeddd5c88353c33c6b9b08_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:b29cb90ae021d9051e806331adb772b86be9a989bedf9a9461b1eadae8792a6e_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:c3c94049fc0bbaae3cef4a160bd09a9025ffffb7ea66ae4821ac881b87af9f52_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:002d4de34b2e9e9db70594ba4ad6c8e1d9c71a62e574ad87ca2643fb46e8a9f4_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:23d0f862da890e0f71db8000f7504477a01385608aec4bb2d32636dfb3eceae9_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:3c2ac2c6ecbb93a462b8197b5a8d66a3efcf15cdb8b314fb9c4522d9d6d591f1_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:7bbda4251ab71c4774ed1bdceb8c2b60a39489f2e100aecea12cf1f27cb66e40_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:990f3cc578ab6a5be28595cdfbb87243586b86eb7fd75116bb057a431441b221_arm64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:ac0a8f82e1c94bbafed8eb3c548f9bb9db6d6b02f5bff2d3b5016780b559af6b_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:f22267adfe8507e63d17153ca66fd990cdc66af2315f32c262cedc79ef0c2889_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-metrics-exporter-rhel9@sha256:27a86c907080c512629c77e20d47fc3fd57085478937656ba499593d23ccebc8_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-metrics-exporter-rhel9@sha256:c898b2e481e96828be4b6ff80da9816d4b82cf25eb4ab550e34de3fd0fa7968e_s390x as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-metrics-exporter-rhel9@sha256:cba06830c16ecc600e05f607e60e36262e9bbf9ce450ed3f89a1d257c247a732_amd64 as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-operator-bundle@sha256:2bda255ea5dac7e615f3e37ae3274deb4f633223ce01402703e093b7c3d0f912_ppc64le as a component of RHODF 4.16 for RHEL 9
  • odf4/ocs-operator-bundle@sha256:5e34136518331768089066194243e0ab4ebe593415f80cddee85b9881fad360d_s390x as a component of RHODF 4.16 for RHEL 9
  • +69 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: There's no known mitigation for this issue. Red Hat recommends to not parse untrusted CSS input using PostCSS. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)