RHSA-2026:17550HighCVSS 8.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.24 security, enhancement & bug fix update

Published
May 14, 2026
Last Modified
July 31, 2026

🔗 CVE IDs covered (4)

CVE-2025-61729 →CVE-2026-4800 →CVE-2026-33036 →CVE-2026-34986 →

📋 Description

CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2026-4800 — lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-33036 — fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass CVE-2026-34986 — github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

🎯 Affected products81

  • Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:e1e94238c48cf0825c63eab6b5186a5b5909ce914a6fe9e4276b00dc51000342_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:20f88c5159c3ca97a84194252106e6b2ca97ded0184dc0057c60c28134b1e589_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:29ad7563856cdc04126578be6f41dd24eb83ba75bddc2822a904b645fe25e293_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:5e62a3f28898f10e83225c9f7ddc3413f46dc34f3f448a6a2455462dd462462a_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:62ee344c5b7a746bebcb381f03692a3e5d20584d781258d57233f47f59b4573d_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:3c0ac0bdb556bd3719ac18d14517b1ad11e9e8983008210e606da9dd394a2407_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:5711032f312ea77d5a20c4b6807819a711f342641f9a51a97cd6f1b8b07c181b_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:fb680524a86a4cc726206fdd569679a036fc4bc3c156ddc2aeb805b820344e99_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:b3cfe9371ec763aed9971f78e6676538b28a19be0549b2980d220942793f6505_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:d7802243beba8ee84a7ac864a7bcc2d185ccb132d75771e880feb95a4901bae8_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:ed197ff1eea1822803fe8ab17089fac8517289a88b8cabc13d9a04154b6429a7_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:97e5697d81ec7511d36b8341f97b70b29a5dcabd643532a73b48cb90a00c5c88_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:044cd5930acccd2bf8011aa9037bda35b2626b36a68e54aa1a7a20da8f80a8b0_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b7b4cefd861b350aaae8fe0a615994a4a23e23ea525b0c69c68397fe02bdb93c_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f21de39a12f03de483a9a430f54f80748262cfb5d8d0a1615a494020c7bac911_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:fa13305c8b0057a6b888cdbb9e9285ed6e99fa25a4c9f7403b4b1349d28a7d18_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:1938479d4e00f6ca6aae09cab8abf9fb07b3de4803cb252158114b06bbdcd20f_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:43d53ed7be0ee57764006cbe32daf2ed128775c0e253733d459f35d9c496a738_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:a50944202253582f24fbf7044c9b499c15577fe95fd4c1c515582dfe7d842456_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:42f9229dc188270388550e99f58035d0f203fbce0db6dee7545bb71274f2802b_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:448a820dadedc585a0d04fcb8273a961402ca02851bf12524292bc56a48a1e12_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a58a402cab7a62b1b5c5bba6988237b2a70aa9b4fcb234a6ab12609123d60957_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:a9c6d453107b8bb38cbce77addbf38837e7839203620de16c4d03d8f172ad454_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f81e6e610d394889eedb0a3384a98cde0b1517c30449f61e8a9c4262b3feb280_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:2560c180ff73220736e35dacc801f7588686721eb6553690fe412de40ec52fa6_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:42c4e23a44979298bed46c87eab5a9ad8aae566d80d11c91bd8bbcd15df67aee_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:ebd5b7a448110d8993cf612a07313740cfd6fddc0d47ff94c35355aefd94ec1b_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:b1c0738f90a82094d9fbeb4fd00df09dad37e09015380684b14deaf3b3f4abee_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:32e4c45d9a01ef921a014b72e08a28f7bbaaeb658ca0bc0362a8777df44d5219_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • +51 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.17/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)