Red Hat Security Advisory: Release of containers for RHOSO 18.0.17 security update
Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane. Security Fix(es): * golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
AI Analysis
Technical Summary
This advisory covers security fixes in Red Hat OpenStack Services on OpenShift 18.0.17 containers. The first vulnerability (CVE-2025-61729) involves golang where a crafted certificate can cause denial of service through excessive resource consumption. The second vulnerability (CVE-2025-58183) concerns the archive/tar package, which can trigger unbounded memory allocation when parsing GNU sparse map files, potentially leading to resource exhaustion. Red Hat has released updated container images for RHOSO 18.0.17 addressing these issues. The advisory references the Red Hat errata RHSA-2026:4936 and provides guidance for applying the update to new or existing deployments. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.
Potential Impact
The vulnerabilities may allow an attacker to cause denial of service conditions by exhausting system resources through crafted inputs: a certificate in golang and a malformed GNU sparse map in archive/tar. This could degrade or disrupt the availability of Red Hat OpenStack Services on OpenShift deployments. No information indicates privilege escalation or data compromise. The impact is primarily on resource consumption leading to potential service disruption.
Mitigation Recommendations
Red Hat has released updated containers for Red Hat OpenStack Services on OpenShift 18.0.17 that address these vulnerabilities. Users should apply this update following Red Hat's documented procedures for new deployments or updating existing environments. Prior errata should be applied before this update. No additional mitigation actions are specified or required beyond applying the official update.
Red Hat Security Advisory: Release of containers for RHOSO 18.0.17 security update
Description
Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane. Security Fix(es): * golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in Red Hat OpenStack Services on OpenShift 18.0.17 containers. The first vulnerability (CVE-2025-61729) involves golang where a crafted certificate can cause denial of service through excessive resource consumption. The second vulnerability (CVE-2025-58183) concerns the archive/tar package, which can trigger unbounded memory allocation when parsing GNU sparse map files, potentially leading to resource exhaustion. Red Hat has released updated container images for RHOSO 18.0.17 addressing these issues. The advisory references the Red Hat errata RHSA-2026:4936 and provides guidance for applying the update to new or existing deployments. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.
Potential Impact
The vulnerabilities may allow an attacker to cause denial of service conditions by exhausting system resources through crafted inputs: a certificate in golang and a malformed GNU sparse map in archive/tar. This could degrade or disrupt the availability of Red Hat OpenStack Services on OpenShift deployments. No information indicates privilege escalation or data compromise. The impact is primarily on resource consumption leading to potential service disruption.
Mitigation Recommendations
Red Hat has released updated containers for Red Hat OpenStack Services on OpenShift 18.0.17 that address these vulnerabilities. Users should apply this update following Red Hat's documented procedures for new deployments or updating existing environments. Prior errata should be applied before this update. No additional mitigation actions are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:4936
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-61729"]
- Cvss Version
- null
Threat ID: 6a160970e29bf47b50637bdf
Added to database: 05/26/2026, 20:58:24 UTC
Last enriched: 07/30/2026, 07:51:43 UTC
Last updated: 07/31/2026, 19:30:09 UTC
Views: 72
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.