CVE-2025-61729 is a denial of service vulnerability in the golang crypto/x509 package caused by unbounded string concatenation during error string construction in the HostnameError.Error() function. An attacker can supply a specially crafted certificate that triggers excessive resource consumption (CPU, memory, or other platform resources) during processing. This vulnerability affects the Red Hat Trusted Artifact Signer (RHTAS) Operator used with OpenShift Container Platform versions 4.16 to 4.20. The issue is tracked under CWE-1050 (Excessive Platform Resource Consumption within a Loop). Red Hat has not yet released a patch or fix for this vulnerability and is continuing analysis. The vulnerability has a Red Hat CVSS v3 base score of 7.5 with high availability impact but no confidentiality or integrity impact.

Successful exploitation results in denial of service due to excessive consumption of platform resources such as CPU and memory. This can degrade system performance or cause service outages in affected deployments of Red Hat Trusted Artifact Signer integrated with OpenShift Container Platform. There is no impact on confidentiality or integrity.

Patch status is not yet confirmed — check the Red Hat advisory for current remediation guidance. Red Hat is still investigating the vulnerability and has not released a fix. No specific mitigations are provided at this time. Customers should monitor Red Hat advisories and apply updates once available.