RHSA-2025:8059HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.7 Bug Fix Update

Published
May 21, 2025
Last Modified
August 26, 2026

🔗 CVE IDs covered (8)

CVE-2024-29041 →CVE-2024-39249 →CVE-2024-45338 →CVE-2024-45590 →CVE-2025-27144 →CVE-2025-30204 →CVE-2024-11831 →CVE-2024-21536 →

📋 Description

CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2024-21536 — http-proxy-middleware: Denial of Service CVE-2024-29041 — express: cause malformed URLs to be evaluated CVE-2024-39249 — nodejs-async: Regular expression denial of service while parsing function in autoinject CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser CVE-2025-27144 — go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🎯 Affected products106

  • RHODF 4.17 for RHEL 9
  • odf4/cephcsi-operator-bundle@sha256:054998fd15c2cf2a1c3c0e9504454d7c43a6d94262fba5065863ef0958a409a8_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-operator-bundle@sha256:c1677dbbb7ee7701b8476a8eda19d6ca3904e9ef540e556f16e2d28dd42b1171_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-operator-bundle@sha256:f9e4141c82beefac763806e9273f88aa4755a74bf1c16dc159da24e07ca9f2f7_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9-operator@sha256:43f235db4b408d9a982785dcfe9b8f1ce928ed06f0fc6e3c3f387b0fe6903d07_arm64 as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9-operator@sha256:62603af81e9a59f83e43f6139ba011790038bf014ab21e34c7242022c39134b8_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9-operator@sha256:ae638e2bff525834cfef15c2553abd8179b86aec85793a629a4437a5d18f0d48_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9-operator@sha256:b3b261767992f861adf1bd822c3ab525f4cb3c7d1193d4cc11d810570c0e0976_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:06d90010f3b9c8c590d096540683c70f0835ba39e62af56d53eb7ce68c0e7021_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:73bee594a7946507616dc374146267793c1b1e0d0709fdb16a412f4987aff9fe_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/cephcsi-rhel9@sha256:cb44f70c8c18e59eb60a11357a92fe0fc6603af554060f3af88adcd6a1b41434_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:6b0e693ff985284abf9543ae6b97434e71a8bfdcc5bfe6de450bab0b06ac06cf_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:dc976291ad97421bf141bec1bda2c89029a3af259af61ce3584900deb8e20f2e_arm64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:df60ea95badf704367af6d12bc5377639dc97528e384e038cfeae18855b0e239_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-core-rhel9@sha256:e469c586c527596f7b4b95866a570d6cd33924c65c13197cba13abd108c92e91_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:ede056376a353ee3964397edb8c6ba0ed6badac7576840ab6d94a3ed7f363945_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:f841e5afef6d9bbfd93d0071d69e3ea3cc61324cea418e166b1a5d281be6c72c_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-operator-bundle@sha256:fea993c67e40de82b11425ff134b24503893cbb0d5a818842669840a3e7ef368_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:200cd576a84341e6c09768497950e94902f6b4d43cfd7a043bd688d98a808a28_arm64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:38666a99ebb56e03c0a36ef9a0fbb927989a4c96445f623a01092984297c65d2_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:e699f2e34d744caddb9201ab96328779f4c4db79be51991af6d50f584f7ccf7b_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/mcg-rhel9-operator@sha256:f3b2fae6d95b5b6fa09ccec1d86972809d088957c8bf22eeaa8d12465ac0cf07_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:915aca5ab56bd1ad742c48994a2fa77901b44eb28c4d4b28c1a4b311b71546bf_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:cfe84ea69c98c40e73077dd701573b4ea01b6030139352dd0c6d723bf1a836aa_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-console-rhel9@sha256:f7bbdadf6cb5c57529c89d6b7a2cc94847761d9d582bf189c6b900823c003097_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:09331c0de3ee129dd1ff47253c9249379390a0f668c4954f8a3993e9cc64637d_amd64 as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:0df50e804697c92388335dbcdfe8692182d8823b4e163bbdad678ed4521d89bc_s390x as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-operator-bundle@sha256:f2310986e2272bd5ea7134646442472d9b8ca6c65287c9fe169a10e2b5a588b6_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:1376f5e8543fbbf6badf4f7b7443dc9c9d35e782a059cea5ecdbe712d4d820fa_ppc64le as a component of RHODF 4.17 for RHEL 9
  • odf4/ocs-client-rhel9-operator@sha256:1b32f5ed12d9ab9c14e7875f0cc12ed0e1e174085d90035ae7a2cd6d6d17a255_amd64 as a component of RHODF 4.17 for RHEL 9
  • +76 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat Product Security does not have any mitigation recommendations at this time. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: As a workaround, applications can pre-validate that payloads being passed to Go JOSE do not contain an excessive number of `.` characters. Workaround: Red Hat Product Security does not have a recommended mitigation at this time.

🔗 References (7)