Red Hat Security Advisory

RHSA-2025:7616

Red Hat OpenShift Data Foundation 4.18.3 Bug Fix Update

Released 2025-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

RHODF 4.18 for RHEL 9 odf4/cephcsi-operator-bundle, odf4/cephcsi-rhel9, odf4/cephcsi-rhel9-operator +29

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286

TI-2025-16742 CVE-2025-22870 · GHSA-qxp5-gwg8-xv66

LOW 21

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00425 Published 2025-03-12 Partial fix · 1.23.7, 1.24.1 +1 CWE-115