RED HATVERIFIED
Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update
Checked 28 Sep 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYRED HATVERIFIED
PUBLISHER UPDATE · RHSA-2025-3560
RHSA-2025-3560 release notes and known issues
Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update
Scope: Red Hat OpenShift Data Foundation. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
Updated images are now available for RHODF-4.14-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift DataFoundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API. Security Fix(es): * golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (CVE-2024-45337) * golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Red Hat OpenShift Data Foundation
Affected versions
- RHODF 4.14 for RHEL 9
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Apply the Red Hat updates listed in the official advisory.