This advisory covers security fixes in Red Hat OpenStack Services on OpenShift 18.0.17 containers addressing two vulnerabilities: CVE-2025-61729, a denial of service vulnerability in golang caused by excessive resource consumption via crafted certificates, and CVE-2025-58183, an unbounded allocation vulnerability in the archive/tar package when parsing GNU sparse maps. These issues could allow an attacker to cause denial of service by exhausting system resources. Red Hat has released updated container images containing patches for these vulnerabilities. The advisory recommends applying the update following the documented procedures for new or existing deployments. The update is rated as Important by Red Hat Product Security. No CVSS scores are provided in the advisory, and no known exploits have been reported.

Successful exploitation of CVE-2025-61729 can lead to denial of service through excessive resource consumption triggered by specially crafted certificates. CVE-2025-58183 allows unbounded memory allocation when parsing GNU sparse maps, potentially causing denial of service due to resource exhaustion. Both vulnerabilities impact the stability and availability of Red Hat OpenStack Services on OpenShift deployments. There are no reports of active exploitation in the wild. The overall security impact is rated Important by Red Hat.

Red Hat has released updated containers for RHOSO 18.0.17 that include fixes for these vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Detailed instructions for deploying or updating RHOSO 18.0 are available in the official Red Hat documentation. No additional mitigations are specified or required beyond applying the provided update.