RHSA-2026:2172HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15 security, enhancement & bug fix update

Published
February 5, 2026
Last Modified
August 26, 2026

🔗 CVE IDs covered (5)

CVE-2024-34155 →CVE-2024-34156 →CVE-2024-34158 →CVE-2025-22868 →CVE-2025-30204 →

📋 Description

CVE-2024-34155 — go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34158 — go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🎯 Affected products73

  • Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:1972346c4c373904610f1c6653003b2d5201447739afb371940c697fa36f06db_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:39c77257153806350a7141d3b1abd312f9300b7eaa2b604b8ece1a02893fb10e_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:ccebdd77596e7390b18108eae3ae9058ee2ad9743e80f3f35bc30eb7d0b7c794_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:108c7b2b69d2018bb6c9e6741fceee0bfbe603fc0062cd1290eabcbe56d085af_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:56c56fa6ca1d34189229bb405f4449479e8565a4ee50b8b88978ed17bb33fa84_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:deb5138606d04414b03a42c3752a637ff7598e852a2f42e9c5c4740edb25d524_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:b2e9d42d1ebfb6f36434b95adf4210de1fda441e9987197661d095757213910f_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5cf39834213b82b4c9f2100c1dd602887eb1806bb2323e89a65cce94a64cc167_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6e968ba345dd668e31596d07a3d8496d7e7f21ae96d3e4c3e3ee36b7386301cb_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:af18b37211070442ea2c07caf7e64a198a6163f57a28315ad760a55a272d825a_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8c830a7e190d1ca765afdf7c0e0838e4ac1fbea4a02eef94e88d276c663f4f_arm64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:6f8305a751c87f0976c3ee9317716c3a3fa716740a0c208dfb528a4c05a4b8a9_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:810112ddddf7bf755ed6a1da63bed32ebb87a7efee646a4a1eaaf4f64dbad440_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:afff7ada1847281a3d4fade353eb5a2474adc0c8c5eddbdf9ad82b28ff911221_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:50e55abfdd65bbbf5b297bd91fe217a3d50339ba6ca4a0bfa7f8c51557ca538c_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:3c5c8e0d264c704b16402064cdb9c9427f30b08ea91be79b0268463ef8293a58_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:3ff7f03128deb4dd8164b1e860e368bf0f60581c591b2854d8d0cf22f820c1db_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:7617f9c2f6c8ee73fb21f9d39aa5efc0461ed932d906b4b1b51b14cc6e330501_arm64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e76942cdd3a6cbe5ae0c3f463800b56709d1e43f6070b97eb1fd739c74940a71_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4236b31472e08f1e195bcf52c839a6ae130c3670fe0ea5ae0d69082d549fb64e_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:abbe0da7973e33836025748fe53d71cd12193fc8282778c3c9538c1fdc8ce807_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:a4a7621b63773e7bd37c2e9025d29ea2473b0af17cd2eda78c501096b5766b90_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b7f25e354fe18538de0384ebb3c8023437eb710096df8fe1b38f856ea217895a_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:c92630bb0f3df1da5987631f07e6f584d51495017fe3a3d033a0a2c4bf4a0bb1_s390x as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:cf2b4e3c1d9ad247ecdd80536966263c0a679220769692ecfa0d026a03b16988_arm64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:e6efcbef4669e3923e7e871b020258a77f7a4f2ffb981a51e71eb5d4471052cd_ppc64le as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/odf-cli-rhel9@sha256:1d50736c62fe89c39e91aec36259862562b5642a32183b93982b214f9e1466f5_arm64 as a component of Red Hat Openshift Data Foundation 4.15
  • registry.redhat.io/odf4/odf-cli-rhel9@sha256:32b7ec47d6de8528a875b6a3bb703394bd8a2cee11f1263cbd85e5a6da88576a_amd64 as a component of Red Hat Openshift Data Foundation 4.15
  • +43 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.15/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters. Workaround: Red Hat Product Security does not have a recommended mitigation at this time.

🔗 References (9)