RHSA-2026:83622HighCVSS 9.1

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update

Published
October 15, 2026
Last Modified
October 26, 2026

🔗 CVE IDs covered (17)

CVE-2025-66031 →CVE-2026-27904 →CVE-2026-26996 →CVE-2025-58183 →CVE-2025-61726 →CVE-2025-68458 →CVE-2026-4800 →CVE-2026-6321 →CVE-2025-12816 →CVE-2025-68157 →CVE-2025-69873 →CVE-2026-22029 →CVE-2026-29063 →CVE-2025-13465 →CVE-2025-15284 →CVE-2025-61729 →CVE-2026-33186 →

📋 Description

CVE-2025-12816 — node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications CVE-2025-13465 — lodash: prototype pollution in _.unset and _.omit functions CVE-2025-15284 — qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-58183 — golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-66031 — node-forge: node-forge ASN.1 Unbounded Recursion CVE-2025-68157 — webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects CVE-2025-68458 — webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior CVE-2025-69873 — ajv: ReDoS via $data reference CVE-2026-4800 — lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-6321 — fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies CVE-2026-22029 — @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects CVE-2026-26996 — minimatch: minimatch: Denial of Service via specially crafted glob patterns CVE-2026-27904 — minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution CVE-2026-33186 — google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

🎯 Affected products81

  • Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:f6fd6800b1fa0af4516240f7c354d2c49557784f25e20af0906c08c1301764c8_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:08105c0e59008210a442f40076c65f6d710f447c9e01a9982991f42ba10c672f_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:395a9075c1f67ab80d70a39ed363f3cda60b992ba06b12e168bd77d2629bff04_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c59c96a100bc3be38d4d9155f5f76bc1be46e6daaa353eb1a3349951b5c67b85_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f076f7c174c71b4f3bcdf719c114c34bb0a8545f8903255ebd4edb7555c64dbd_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:6fde362722cba22ec65d5d2d2fd30132b385c368f313b598e3f167cda1a28b14_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:7a0ad48c0287e506dfdb09cf63b56aabd2219197a17e6775945b2b367cb6c560_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:b4637244726126904e7249d0da9902a56e905f7feb51da0cf573ad21dc69f610_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:99101c38a984c0b37b9f8acda7a1fb110d2678257a8078c2e6bb4c2f350c0f56_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:a0b2047ce693705b8b81aed302f894d56b2a06398b20fcfda6b34e8582eed00f_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:dab1f21facd96172e970bc122f81c277b09baa2566526366fde9a68dd50402a5_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:79cdf4b91e93a718af6dbe8cd5c51cfba2a60fb409b6006f406c25374ef9dae5_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:8c2491fde47fa73a8a5473c3083f756856b7cc93593d011e94d8d8f21d82b42d_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:8d97ca44ba723d550de9273b1c960358a6d442bd31f4c1ee12daebc48d753d78_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:d3d711f548e2a2a5671c49aded10cab8a50f308632473dc0ba038230d3b1841d_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:f62ac5d58755832a2b57395a384202732d52686cb79d982a5e2b0a9da1af4f19_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:06954624c095f5e9ddfad81a6888ee1573242995b8306e0d3649d0210174264e_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2f5a4fe493187cc9d65b3a926811026defa4e7575b12d907d7f44941024e8333_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:4a002484c70794c6ea4cb09d678799d7ab156e729dae985347bbf042eeab0547_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:23c1e7e5a8d8541052df0e98fb8f86de6f2073db22d8d93b9ba3eb11af660684_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:18629de55c7a189ceb23fe12d9b28d2d846d706839c2ac606fc1679789fb9284_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:1b1fdfc4e3861e102612450c7227feedbb8878c7982b2800475951ffcb51dac9_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:7c0533c218546539c15864670ef1f1d87cb672b09eec10f5a009202546d76e3e_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e8e45af88beb7d09d69adff80fe6f2ee0e72188f14b6ccdbbae3e03083dd0874_arm64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:9af108aa6c6232b8589198878cbf60420208246cb8caa6c6339f83a827e16f97_ppc64le as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:a391fc9a4947a82355cea0be542041dd43c7dfe2c5dfcf67b8e2feb22ea1208f_s390x as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:cf7ae8b451c0348166cfb3a35f9792d350ea24942df50fac15d88a2ace9de7d6_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:2e30762e204f4d06d7a8bd14ae78933adbff1f0068b3e35a21ec23af88f48fc6_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:2cb0415deb14a80dbc23b16d376b58aa5a144e16a4a4e8b4bd45d8dc750806ca_amd64 as a component of Red Hat Openshift Data Foundation 4.17
  • +51 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.17/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters. Workaround: To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.

🔗 References (21)