RHSA-2025:21378MediumCVSS 6.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Published
November 13, 2025
Last Modified
August 19, 2026

🔗 CVE IDs covered (3)

CVE-2022-0155 →CVE-2022-0536 →CVE-2025-5889 →

📋 Description

CVE-2022-0155 — follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor CVE-2022-0536 — follow-redirects: Exposure of Sensitive Information via Authorization Header leak CVE-2025-5889 — brace-expansion: juliangruber brace-expansion index.js expand redos

🎯 Affected products92

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:d15a78c4f0e9eab5a60f33e91dab3f397e743016c162af4b74ec4423667b7b43_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:026b24af0aa1bea42be0b5357a2bfaabec453babe109b278b613371f7c6cc94c_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0a00775092a7993fdfbeff9a8ba921e8f6de38ddf18f3152a80d87a36dbd25e1_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:309aa11ff9ffa54b8aa5f8faf3d67f942b5b08e6fda2d02b1868a0eb5486b08d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7c681bce8c5042f259358ea684b9bd48a0df2cdea24bee9538dc88acd74ecc80_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:031cb2bd7f8a7501db204a523b2169c52c3499efc0d4aa1ac804c6d26ba480e5_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:28f45874f4593c9ad84b954cb5445cd8125de33161f4080febe1896a559121b3_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:bb793e7d18e2ee05b806f00b446be89214c4cb3fe9dfca60b4dbe3d48799d4d6_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:5f3df6a923106971003260763311e296f2485bb4daf08b2cb9abc08bee1e6362_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:6a99a970a27acd21c51e7ce90af4e85e97650ffbc6256cea5f79a4a31668533a_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:bcce8218567f2df0f4395bdd069d040cbd94b3e0c0abf4cb195477a679320974_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:1431015652f27d05626b19f7b4c30f2b920dc6577de7495e3738d63bb5137b88_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:2c0f511e2cfc1fc6aa2447cc787d48b4f6342eebfc9e0a928ebee40e5bfeed38_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:394a36e01902854f9b131182e16de4d336176cffcf4986b070b9a7aacf14f04e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:8aaf81378e111a163d5247530dba0c9ee2f3693786ae023b3efcdda91be2cc16_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:ec720752e92d73bc047f1bfec8394e1da5a274e1448a2cae1afad0d1c3c05feb_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:3fbaf8ca4c8b8a064eb168cf26ea379eb6145371084da71ce78fb27fc8dd720b_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5080a8205f996e019668d458f010e8cfb999db79e99d860389a73dba91da9bd6_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:935ddef552e2eced2f02102acfdd578ec8f0692976b46ddca229ee00d8c66956_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d4d3a189d94f382b27f70f289e96247ca4a6a6584d91120f031e63e6b6f92e97_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:f935986fe63c3d1ffc38e5acfedd5ebfdf4075c98c942af55918ee386b899fa8_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:24a78dff84b60d99f35ff018d51d920b2ca4813ec4bbe385bb035cef27e56101_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:351a2da8c3408b5774f24ea93f5498e57f813ba74c2027694ae09d3ff7e08f76_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a2f84aa279abe89c5d2a519cb57cd2c9f3bc5ba216fad8aff1c24494128ac5db_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a7cef20e2aea113d041b681f35b93e275434b7590e650dc85a259ae4719a5733_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:65afd710ee59560b1d4fa38c76cb75d66739958e34c1c1620f83effe517c4910_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a11d3d514eab2f33aee32c30ae2113538b422aa6c60aef24cb83b626bcdd405f_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dfa33da31e1a8a5f72e1aa7b4b256490ff5a8c5fac4c5dca8c91605c44f9f58f_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:f28462526d32eaae37d005e9f7c54bba8aab20a87aa4bf9063c39f60ab89ac43_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • +62 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Currently, no mitigation is available for this vulnerability.

🔗 References (7)