This advisory covers several security vulnerabilities in Red Hat OpenStack Platform 17.1 director Operator container images for RHEL 9.2. The vulnerabilities include CVE-2025-58183 (unbounded allocation when parsing GNU sparse map), CVE-2025-68121 (unexpected session resumption in crypto/tls), CVE-2025-61726 (memory exhaustion in query parameter parsing in net/url), and CVE-2025-61729 (excessive resource consumption when printing error strings for host certificate validation in crypto/x509). These issues can cause excessive resource consumption or memory exhaustion, potentially impacting the stability and availability of the affected components. The advisory references updated container images that fix these vulnerabilities.

The vulnerabilities can lead to excessive resource consumption or memory exhaustion in the affected container images, which may result in denial of service or degraded performance of the Red Hat OpenStack Platform director Operator. No known exploits in the wild have been reported. The impact is rated as high by the source, indicating significant risk if exploited.

Updated container images that address these vulnerabilities are available from the Red Hat container registry (registry.redhat.io or registry.access.redhat.com). Users should pull and deploy the updated images to remediate these issues. No additional vendor advisories indicate that no action is required, so applying the updated images is recommended.