Red Hat Security Advisory

RHSA-2026:4936

Release of containers for RHOSO 18.0.17 security update

Released 2026-03-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +22

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295

TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27

LOW 20

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00443 Published 2025-10-29 Partial fix · 1.24.8, 1.25.2