RHSA-2025:21704HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update

Published
November 18, 2025
Last Modified
August 24, 2026

🔗 CVE IDs covered (7)

CVE-2022-0536 →CVE-2024-45338 →CVE-2025-5889 →CVE-2025-7339 →CVE-2025-7783 →CVE-2025-22869 →CVE-2022-0155 →

📋 Description

CVE-2022-0155 — follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor CVE-2022-0536 — follow-redirects: Exposure of Sensitive Information via Authorization Header leak CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2025-5889 — brace-expansion: juliangruber brace-expansion index.js expand redos CVE-2025-7339 — on-headers: on-headers vulnerable to http response header manipulation CVE-2025-7783 — form-data: Unsafe random function in form-data CVE-2025-22869 — golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh

🎯 Affected products103

  • Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:88644e786b58be75a739389f3dbb3dd448de59a3c771eabf5838c97887f18bad_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1d99266aa6792fa96cfb2813b1cb05f699112078fb5caee6fb18011ff8580d0f_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7264546472b9841c67d768bfc24a4120b4d9216de91779a90bf918636d2cb558_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c7d1fd337adb3a89005b172e62c54d1dcb48498a7687eb790fbdc1c65764e40b_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e0ddfa4a25cac7836fceb0d2b682534e0be06f92aaeaf46a65b2b30faedf383c_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:5c6640ec523c2520e546da3433f1ef149f165ccf907d9746235616de54df9d56_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:c13ea9701e94e626de8bdfe3cc9873f89fd88d8203d95de252955ce0246deb1c_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:e5f93f28233a86972cde565fe3564b47a739ff0d99f0c76d9113c35665dc8075_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:f0b6e7badd62115b27595575c1ff6edf9b7846c6ff3ad9fa03b423d40094816a_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:735c774f882177c6e667480bc6528fa7e76a4ce7648fe6d4f5b35891ee43ff20_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:7bbfb6add95ec966fa0fae6673e7529dab92551726e9a26e3771ce3786ea1aa3_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:8c82a478ebc0918907971653269363058257118c6734c6589bb7e13d00c9388f_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:e7660b51f64b60f13c043f40a8ac62028f4fcec734ac01a2e607d65b852f655c_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:209f25b8a4dbcaa103c01aba5921d6f621c8832ab1886d575785b3121f231a75_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:89e2656fdbd5ae931efb120fad7d02ea0b28a9c86b693b9f91f775b02e4755c9_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:9d92d47dc70edaec0317b27b437db7a9a6a22703943c909d08431f702865ef4e_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b3a3c3b901954128b428853805603f0ae09dd5b6401596f65580a58460e308e6_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b88f11532b8d0c1f673e2c7e454cf7637e9830cf25bdfc61b71fb8b98947c73f_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:40a8b239f6d76102dcc37453bf2884179fd47089e6c4945c5ed7479ca97c8997_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:73b5c82d9e3b075329c8447404bcd53d1eb6b8fc240218c4b7fd0a32b3ba9fdc_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:a3ac21943ff1a943aee289166e4bb0f56f9691f9301538c7f2f284b0f60c45fc_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d9fb83925ac1a019c400b603171c43b23f726dabaf933420a32dfc9d28571d24_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:91576f6cb1fb49a8f862d8441fcc218131e835230656ed452d37701cff6b3b7c_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:575c6badfde539d86508446427416b566a7ef1036fbf16fe561124c8775abe3a_s390x as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:64ee4a768d5162df9a2817d2c7124ed1a273d2cc3291aec1b3c167b9b764af87_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:88e71661be3cd335ba3b1016fa9dec3301221cfd9b8f708ef1ba1a24d41b678f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:c50de6e5c0a3705afb02e9301073992484bdeb989f9e529920848c609713cefc_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:65faa96a422b114af71d7d6212875b0004c5dc3e4fd119cecb3a32bc69800fe0_amd64 as a component of Red Hat Openshift Data Foundation 4.2
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:6f872af3d35a9618c23b5e9c3ca663a44001764e1f977878e27fcf2a6b726fc8_arm64 as a component of Red Hat Openshift Data Foundation 4.2
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Currently, no mitigation is available for this vulnerability. Workaround: Users may work around this issue by passing an object rather than an array to the `response.writeHead()` function. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: This flaw can be mitigated when using the client only connecting to trusted servers.

🔗 References (11)