RHSA-2026:6184HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.13 security, enhancement & bug fix update

Published
March 30, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (2)

CVE-2025-61726 →CVE-2025-61729 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

🎯 Affected products92

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:1e1c090a1a2a9a4ecd41b3e70c16a1a26c6e24505babcc04af57dfdd6a874c2b_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:15da48ce459ac77baf3ba6fd5c5c231310d9f6323fea8ea68f39326031fe8d75_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7d0aa6bbba0cbd84d092910b057b32d6d5e20e4de249cec3e3bc908b1f01f0a2_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e527b03513ba9e0d611fe4e89b6149a14a32747dd95605a36b572c89284f4eb7_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e957fbb8420a8394d15fdaeadc351b3710cdeb59d2cd86e43dd4dad1472df847_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:5b9b6ebe13f098c401a0374de95260dfbef2d8a8d5f4072f13ca5b2ccd249168_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d321e73408ac86e6757aa45f604fdd595cf32c37e6280628dab4a336a6eb08f_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:b8b1bd25b8bad6859413ecba9c7b9137db25a7b80768838643e37d6304d70315_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:081b4ae6d4cd30faea2600d345df27f8a117cf80b263598ee6010925efb7c00a_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:8d7acef03cd20033ef81f7e7bb27f0724935bdccfdfd0fc25fc845a7fcc403e0_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:9eb3e2043402719a5cef662e5266458f3fd38497c2b3d5790f74aa357d8aa89e_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:09b5dafb1e88781997b2a34aab9002eb79e08c3f57d2080fdc34ba0ffcbae840_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:151b7342469b48fc4e737a25bdd2f334fb0abc2217f6261ef1af57b0e5e1f2f8_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:44458cad32917b3f47a2b2d80e3546a0ef4edfd66c2661c2f59cf14a5776a093_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:9e19279098bb59c55a9d82d8d193ba4a1ea66d4a99de883dec2cc82ee41ea1f4_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:acdca139d9b87e53cdadd79d6f22bd67ca8417fbd13014e5773a49f45da88983_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:05987829acdfb85202174009bbbe38fb1c5408b0054752fdf23c49be9dc1bdc1_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:30bd0c096ec25b220cd872b450ac7d12bea6aad09b66c48829e72c54c3f73c3c_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:49d09af234ac8f41751d0461d869d829008b21b2b93cc50196aadf2321a47924_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5129e5202f7b6badd7c0da8f9540053079048fa0f8e2e337fe6f1eb6aa5dca05_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:74ff9af31e918804088279dc68c4765099d5108b98b37d8311370e32a6a7b711_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:008fef7f9ae19e47818f18cfa53c4c9f2a39697ed7f052bf68a632742f90186f_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:07e341abe1d62f19e569bf35c59a4e8d8cbe53476c77279a27dc9cff171356bf_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:1a6360c861def8c6518a84639620c0b88cfd7eb69d4d131232b72ba59bf52ade_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:1bc385728aef2749bab029cf21c795d19c4be2f6259f87e88af306d90baaed23_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:077137531fbebfda3f071186eee0623f2b2dfe55933774d0957259217fd5a4aa_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:26d999d2a06b3568ae05af33a6721c2f95d7f9566af01e5c5d78b990781d3472_arm64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:882d21f1c6596acc164b9f8c32a7bb825749dea1ae49ed6643062baf79e09b2d_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a3cc89b871545e7499141c57fe9a1b73778674cf6b8cb49255ff7014691366fd_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • +62 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (6)