RHSA-2025:0164: Moderate: Red Hat OpenShift Data Foundation 4.15.9 Bug Fix Update

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API.Security Fix(es) from Bugzilla: tough-cookie: prototype pollution in cookie memstore (CVE-2023-26136) css-tools: Improper Input Validation causes Denial of Service via Regular Expression (CVE-2023-26364) path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296) express: Improper Input Handling in Express Redirects (CVE-2024-43796) send: Code Execution Vulnerability in Send Library (CVE-2024-43799) serve-static: Improper Sanitization in serve-static (CVE-2024-43800) cross-spawn: regular expression denial of service (CVE-2024-21538) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat