RHSA-2026:11747HighCVSS 7.5

Red Hat Security Advisory: Release of containers for RHOSO 18.0.18 security update

Published
April 29, 2026
Last Modified
August 13, 2026

🔗 CVE IDs covered (3)

CVE-2025-61726 →CVE-2025-68121 →CVE-2026-25679 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url

🎯 Affected products133

  • Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:93cca70ca2d64dff06450c3e39f6b69c5287e57b3a4465fc31a45ce6247e4aae_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:26cb2fb6f04532f0f49afffcd42cf570a9d788febb99f9bd4727f4fd2cf107b3_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:1e5097ee423659df4bb110b29ae6d72be01a3d6b0f2543880cfad36f14cdeb69_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:700547e85197e2cfab167dfbd60be6082487eaf8f571ab7aa94588c1074842c9_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:e3fdc6df9c4f9101348bdb1804e21cda919632e4f89da5acdd6171c53dfe3a6c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:0cf694a2529a9f6db2253432c1c2d42b79d5002288fd7b50795d6d8b8bf439d2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:77f73cdc9d53348d746406d6e2e21b06d0f70c7fe2805a4e3504045f2a1f9133_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:4e8692fc881c657f01f335e67712c7cfca1eee34d08bfbb0b4ca78c4a041fc17_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:bd64a3d0e64ede0b87aa68ff06b79a6c9d3a2b2c915534a1e9054a8b080de167_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:4169aebbffb7dafa8c023a9162e3c4df577c41758d12d2f4d6dc8e20d754c620_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:e6072055d9c18a2535d1d38359ebaee06e90d4414394dc016803f4783a1ed680_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:d68e1c277c67d3f0a8413da42e82959c6172015ff7acf5eaa71983f3d5c1a545_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:4511273802e4b7c71ac8b6f0f1e87706f0291fabec6585bd5315d604bd0f4284_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:de6ab3356ebfd64ab68f2416c2d114587d9ff9ebda65f7abfe0716e058444647_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:0fa36fc28fa60c9cd4848f627dfb46670e186f8b391b276816a37cdd52b26103_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:cdbff564040f02cd4923fa14c6f0a36e69fb8043a7a3d32a37498b9336419320_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:5700e4731cebf2b58ce9dc2c26f707e80ae8e5df6064a768b9c4d5a21ef1985c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:32efd70bbc507c3b0c5e7c28eb6f7e65239d7fc9c84656aad6e29a512e420f89_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:c050525bbeedabb8fb49720d4a13943116b8e765d0074fdb504a3499532e9bad_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:7fbb48f04cb3db7285b0b04176528959f8187294d823fd58fe904214deec3c74_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:e701a16261404e6f426ebf09042b82f232e0b5b29581785f66d200d8423c39be_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:9d70b9af106925a418bce77a2fab192579ee2c70b4b705742760c6f0dc30ec75_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:b94df690cb3d7a22b7419ebd16d96ff5a31c5225fc619614791d4037e2342a57_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/placement-rhel9-operator@sha256:f1944eead21b440de0f79eade19f044fdd3858ed2fa7c0773ac776f11ada8b35_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6510521704dcb211458e47ad3aa1a45066b4014dfe2379fae88506116ad86b33_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/rabbitmq-cluster-rhel9-operator@sha256:560eb0097bcd627b3c921074cba7c8789fb7f7acbb9c87980088a463063b76a6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:3e5385acf99bd1cd98161c5ebbfcd492110416495931846ab416ada808ce88a8_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:fad8a8fe46ab2ececba12e1258945386bf0295f567dc104d596df0dc2e858c76_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:3537312fc43fc5033bbdeffddf55ee171844a0a6ac74b5c10eb9ef9d89a04b41_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • +103 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update as a new RHOSO 18.0 deployment, see “Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index For details on how to apply this update to an existing RHOSO 18.0 deployment, see “Updating your environment to the latest maintenance release” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)