Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• https://access.redhat.com/errata/RHSA-2026:7885
• https://access.redhat.com/security/cve/CVE-2025-65637
• https://access.redhat.com/security/cve/CVE-2025-68121
• https://access.redhat.com/security/updates/classification/#moderate
• https://bugzilla.redhat.com/show_bug.cgi?id=2418900
• https://bugzilla.redhat.com/show_bug.cgi?id=2437111
• https://github.com/mjuanxd/logrus-dos-poc
• https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md
• https://github.com/sirupsen/logrus/issues/1370
• https://github.com/sirupsen/logrus/pull/1376
• https://github.com/sirupsen/logrus/releases/tag/v1.8.3
• https://github.com/sirupsen/logrus/releases/tag/v1.9.1
• https://github.com/sirupsen/logrus/releases/tag/v1.9.3
• https://go.dev/cl/737700
• https://go.dev/issue/77217
• https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
• https://nvd.nist.gov/vuln/detail/CVE-2025-65637
• https://nvd.nist.gov/vuln/detail/CVE-2025-68121
• https://pkg.go.dev/vuln/GO-2026-4337
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7885.json
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391
• https://www.cve.org/CVERecord?id=CVE-2025-65637
• https://www.cve.org/CVERecord?id=CVE-2025-68121