RHSA-2025:11814MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Published
July 28, 2025
Last Modified
August 1, 2026

🔗 CVE IDs covered (1)

CVE-2022-3517 →

📋 Description

CVE-2022-3517 — nodejs-minimatch: ReDoS via the braceExpand function

🎯 Affected products74

  • Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:3ca66371d708d76c3ec47c9b7a140a8cd7c1200ba7929aa419dbbdc936af4fe7_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:40bdf2103c5a138977f2a15043a7a4039887815196a1399d562ae4f707316551_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:70170410fbfc1121b81ec1598f345b3ca2dd3f4ff3214fea081d74d852e57351_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:e141b26a1d13e1176e51e5785d5de80bb72e6639c0211e12868411e982408fe5_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:0a34f80704191711af925a5eafbf3d45f72fb55222ae357386df09a295a20834_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:ce386e492abc222b731047626ddd3075040fcee46b4c8ea89cde9602c060e083_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/cephcsi-rhel9@sha256:d6f4f842de110a58594c7fe8a353da37cff578d5af30cfc45658f7f18d32c2dd_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:2c1082623db60c5ae019de7743a103fb512555c06c74ac263f284f23ba3c2078_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:5ada583afb6f8cf23741153e7a574b82cb485b2433972bb9c780d7a95652cb56_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-core-rhel9@sha256:c34f5d37e289f1e68087b534c4dbfc630b4aca0e1941f91a67f9793d6dd6e548_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-operator-bundle@sha256:00fff93a5a589711826118c506438877174e131584ebb871efe9d6059140a187_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:7ced63d4493804bfd19882a34a2fe320aab24609a5ff850db32465be9cae4064_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:b7c2eee37459dc3ea41b6db3a56b7ef9928b58e41439125d3e8670019d10ff88_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/mcg-rhel9-operator@sha256:e958b536892b02d3425eef7f751f2e14a0a9d44c900058734133b26e3e812ec4_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9e6ba39ac9fc614fdddfd43f21e514261e51a444dc6b02dbc41259a8ec6029e9_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:b0145219aad39170213553dafc87306d3b48aa3b98abf7ffb07c343cdfb3687a_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d4b5113f003559411a39d19c379d3c1a2040ad85c4508a3b79a38d1672a89d9d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:1941ebe24223df7cc66733f908b4b3160c03e3cb0330ca0bfc1f87dfff86134c_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b89febbc7b26393f01d9e82cd41a9fca4d620886d227c392026edaeca2e55a00_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:cbae777c37f01d401a1a6f1c5f74f623c9d0460437f4e60f917724b1df2d4ed1_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f1306d1f5ef2e53abf5caddd5a1584adc798826624e74d9097c9f168446073e8_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:130604fd4f316d23e66a4bdc67f8eac203fa9f0f0dbd08358723a32813f98d28_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:19aed11229ea7260503c01414734da44e3e17363a652ba62fb54c7418405216a_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:c04defcbf28652a25786819fb380b6a2cfb780136443d9b434d4e2b225d2b17c_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-operator-bundle@sha256:cc7a6db8f49ad9795d9c5f44988eab9206df146e33752354c30a04f3129cad59_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:147cedf47183ebe0ae5305d15e91c4faac0a663232154a16b1277654f96d4093_ppc64le as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1ae3ddb3af0656b9a6b14b60d85520666acb52a94919db61bcef686bc564a39e_s390x as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/ocs-rhel9-operator@sha256:f1fe3b8f74e5a44aea2654e02312b15035b74ba1bc73715e2aee50567ef1cb06_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • registry.redhat.io/odf4/odf-cli-rhel9@sha256:1554434fe9e5dcba907c7ec48b5cbb38e74fbf909008706ec0349588187175a7_amd64 as a component of Red Hat Openshift Data Foundation 4.19
  • +44 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

🔗 References (5)