The advisory covers Red Hat OpenShift Data Foundation 4.19.15, which fixes several bugs and multiple CVEs including CVE-2025-58183. CVE-2025-58183 is a vulnerability in the Go standard library's archive/tar package where tar.Reader does not limit the number of sparse region data blocks in GNU tar pax 1.0 sparse files. An attacker can craft a tar archive with a large number of sparse regions, causing the Go application to allocate excessive memory, resulting in an out-of-memory condition and denial of service. Exploitation requires the application to process the malicious archive. The vulnerability is rated moderate severity by Red Hat and has a CVSS v3 base score of 7.5 (Red Hat rating). The update to version 4.19.15 addresses this and other issues.

Successful exploitation of CVE-2025-58183 can cause a denial of service due to resource exhaustion (memory allocation) when processing a maliciously crafted tar archive. There is no impact on confidentiality or integrity. Other fixed bugs improve stability and functionality of the product. The overall severity is high due to the denial of service potential.

A security update to Red Hat OpenShift Data Foundation 4.19.15 is available and should be applied to remediate these vulnerabilities. No effective mitigations are currently available that meet Red Hat's criteria. Ensure all previously released errata are applied before updating. Follow Red Hat's official update documentation for applying this fix.