RHSA-2025:3959: Important: VolSync 0.11.2 security fixes and enhancements for RHEL 9

VolSync v0.11.2 is a Kubernetes operator that enables asynchronous replication<br>of persistent volumes within a cluster, or across clusters. After deploying<br>the VolSync operator, it can create and maintain copies of your persistent<br>data.<br>For more information about VolSync, see:<br><a href="https://docs.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.10/html/businesscontinuity/business-cont-overview#volsync" target="blank">https://docs.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.10/html/businesscontinuity/business-cont-overview#volsync</a> or the VolSync open source community website at:<br><a href="https://volsync.readthedocs.io/en/stable/" target="blank">https://volsync.readthedocs.io/en/stable/</a> This advisory contains enhancements and updates to the VolSync<br>container images.<br>Security fix(es):<br><li> golang.org/x/oauth2: Unexpected memory consumption during token parsing in</li> golang.org/x/oauth2 (CVE-2025-22868)<br><li> golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of</li> golang.org/x/crypto/ssh (CVE-2025-22869)

— Red Hat