RHSA-2026:4936HighCVSS 7.5

Red Hat Security Advisory: Release of containers for RHOSO 18.0.17 security update

Published
March 18, 2026
Last Modified
September 1, 2026

🔗 CVE IDs covered (2)

CVE-2025-58183 →CVE-2025-61729 →

📋 Description

CVE-2025-58183 — golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

🎯 Affected products133

  • Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:11a6cc1c3c4713b49b7af1e94e9bc3fd6781589a6567d612276dbc5eec4e8f7c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:f36ad3ae7e316cf5967d554c1d1d6a7b0f59f9ff538bcc26e15f71302f45cb17_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:3e076d59de9bd368fb847d3fc221082e489cf24939e019c15d0fb144fe13c2d0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:aaaf11593a9910514911fdf4a86c27fff5c4c61b3612ce741f148981f6844ef0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:9d337e46a39ff30cc0b2ff5f8191d1dd3bc1cf4a33d3dc6a7c6ff9a20a769eba_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:0561c665049b0e86422b602621fdf510715b2dd174ef40b1899368362d54b568_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:34f16d5733fd0d3e43a6ba8f6ac824e5600d93d2a46f1548a27060fed9208cae_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:949190f3a7a42bee114e221efdb3febb257e7dc6eb37b2545e3643a60ce60885_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:19c9b7a8b22d91e8d40bceae1bbcd3a46bad4dc6095921e19474d9f03b120cbd_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:08932b5947dde52c129a4745161b0a49eed6923ebfe44a998269189046db44c2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:9d0aa8312a32e08799198c752a8fb33a05882a6970c78611693e8cb7e8debc2f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:411ffb693b3d07bc4349c9085863a1a7f1ae191f20af214a5e6048a41bdee38b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:c06752aad666dc249b67dc0a80006f26e5253fc190e17c54ef7dfbb8eb3db106_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:c884596f0e5c08a95f1be5d76acb8de1ad11f559aa9ee7da4bcb5dd79469c053_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:1b986a08969e648152d98b77270568a5807c92dc09c45f3341c9b9ee906a6d17_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:f02640c5a4cf304b52d00859e9566e7c06da62574e0a460610b8f4f5ed5f1ff4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:55539394b894f526c181064759e80b5e50ff43ac8ede66d4ddc6ce3cd9b8cbfd_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:8b916f800e50786e65aa5d64d6be3d5943f616cf831f78d2ae7fc0ad1e5553bb_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:ab86b53a49adf8ad2b9658076cba5c55b3a19552ff17ea178dfe346fc1ac9979_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:d952fd4ed1993563f7056970268a9a3d95944b8750d2cb3355ab257c47364427_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:bcc47951381f37e2cd0574bfff2031c420d7bac7abf4df6f61a2c0a7b0702c9f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:ca7938fd7c4f428280f66718983bc650e6506294ee18112f97dda5b4f14eebc7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:d2cc1931d0da2067d6921a72bbd5ce35691ff6a29261ef772dd9a7b8fa63bfb4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/placement-rhel9-operator@sha256:220371bf2b422d41ab6472aa12599d9bf244bc1785bc1dc73d89af8ed09cff8b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:cb45e4320a47a5c40acf78ad7c2e0ff6ff69138b9f01e094be56c05c589193b9_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/rabbitmq-cluster-rhel9-operator@sha256:9f1e83a69d4ad4613471bb76cc83d439b033f545a7b22b6f8376cac6eae093fd_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:621fd63b431725e3df44bde8c95179e036c212493a6333121b83be087730ca50_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:35b965498c5670f6729da032f5ad5bb8a027e17b89e3707d40e6fa0053cd489b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:caee1f4b776309dc747a4ba6b3d702d4ab837e6e22fd3e9616bf9d8a7f4e763e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0
  • +103 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update as a new RHOSO 18.0 deployment, see “Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index For details on how to apply this update to an existing RHOSO 18.0 deployment, see “Updating your environment to the latest maintenance release” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)