RHSA-2026:2164HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update

Published
February 5, 2026
Last Modified
August 26, 2026

🔗 CVE IDs covered (5)

CVE-2024-34158 →CVE-2025-22868 →CVE-2025-30204 →CVE-2024-34155 →CVE-2024-34156 →

📋 Description

CVE-2024-34155 — go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34158 — go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🎯 Affected products76

  • Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:47a959cc6f8fdc22c33f3220bf2f46afc36f2f4550c0be5a8d494507f575d251_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:6b79a6a9dd9d44b0af2be6e721c88f48ebf4fc9add4ca5dba0424081ee0305ec_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:b4017a3f3a28295f04479240eb2f676d89a0215573bcf53233a8a917b7797e7e_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:3fa0370b77d5f5b75b29303c25b8a02ed98e022d201b960ae7f76a1f5fbeec5e_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:471cf5dcd91d7ffba22cde9e9c854d44542af7c5f173f8ab7cb93c23d27707eb_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:5941c2a273c644aafa0953cdb610d6ec000e422123e526e35b6ccab83048e2e6_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:d0bb70f8364603ec6372c5beec42d2672f186f1055d021bd9c9bb515d1b5ac31_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:43fcf6959cc6cccde070ed4cf70c0877bf0af747e7c1fa92314d796f31cc01c9_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:699cd274ecfa260ebdafad844e9ea0f920da7a041fdb3bd2ec984314ca63ca6e_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a4b56f6fd5aaa352ea5378174a89af53270d3634fe599add99750b1682e31b1b_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cde511cc866cbdbead632cc65796294668a108b042383a2c82e9a8a37b577ce5_arm64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:50ff6b8bccb25519aba55a1ba926a543a924130ea9506c682ccfdf685e81844e_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5a4ee1bf283b2854e80035faadd4c2358aa3420b4da2f6131de81309278fbff6_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:cdeaad64315c5abd31e06f163391b4aa8d4612dd62b7e50b6e2a679772e4b3ea_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:425baee910efcc5ac66860165d01ab030f3726d240d38d1c90efa33100cee6b5_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:047dc620cbf080a440fa5d5899dae1ee78f42f00b57994e23601eaa68e5c8a03_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:3affde9b505e083508f395c88c1921838e384b402962695af718fca8e01ec8ce_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:6c5c24606f4fab8d78ef7fcb2d2c0f390a06b85ae23fb7b8c87c9ca3fe2ce67f_arm64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:9c112a4dd9739bbc45eab8a1622fba5f611d0b466afa41cad5f09702a672819a_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4ca85db5f95eaa2176777a354f03e65da5caacf4877d6b281a1c4d0bb8e82257_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5b4892c4f8dee8eba8c56d42e327ad514852422443f9fffd320738abf0f4bcc9_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:96dccfdcdf8f1e57e7017f16dbdb4d2e7f22c9c7a3529c1920b0c1c58ccf688d_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:d6fc4c01530f5f43801094608cb675fda826dcc934b139f8bd740512908caf5f_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:229abfc417053621b89b2cf37daab14eb981cb7f881fae63e90bf3af6c0f2d49_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:491b584dd6612f599b86288f6977677d961a86ddc47a62bdc028865caa2c6533_amd64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b512157c94826d9ec1ca9e814cded99835cd984350ba6efe423cf70d1f7700d9_ppc64le as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:c382cd1d77428f4e177a45d3d5c996b2474eb1daea17218c2529a6d7d77fb7c7_arm64 as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/odf-cli-rhel9@sha256:1658d343c771afb08401d90436ea38f0b965655326b81deba2facfebd7f436d9_s390x as a component of Red Hat Openshift Data Foundation 4.16
  • registry.redhat.io/odf4/odf-cli-rhel9@sha256:227110cf83abc62e8bf9d1edbffab292b4f3cc6e08bf94bfad0f73cdb42494a3_arm64 as a component of Red Hat Openshift Data Foundation 4.16
  • +46 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.16/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters. Workaround: Red Hat Product Security does not have a recommended mitigation at this time.

🔗 References (9)