This Red Hat security advisory addresses several vulnerabilities in Red Hat OpenShift Data Foundation 4.18.20 and related components, notably CVE-2025-61729, a denial of service vulnerability in Go's crypto/x509 package caused by excessive resource consumption from crafted certificates. Additional fixes include denial of service issues in TLS 1.3 key update handling, authorization bypass in gRPC-Go due to improper HTTP/2 path validation, and incorrect parsing of IPv6 host literals. The advisory also includes bug fixes for UI blockers and image usage in the ocs-operator. The update is classified as important and fixes multiple CVEs affecting Red Hat Satellite and OpenShift Data Foundation products.

The primary impact is denial of service caused by crafted certificates leading to excessive resource consumption in Go's crypto/x509 package, potentially affecting services relying on certificate validation. Other vulnerabilities fixed include authorization bypass and denial of service in TLS and gRPC components. These issues could disrupt availability or allow unauthorized access if exploited. No known exploits in the wild have been reported at the time of this advisory.

An official security update is available for Red Hat OpenShift Data Foundation 4.18.20 and related Red Hat Satellite components that addresses these vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their systems are installed. Detailed update instructions are provided in the Red Hat documentation. No additional mitigation steps are indicated beyond applying the official patches.