Skip to content
OpenAdvisories
High RHSA-2025:21068 2 CVEs

Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update

Published Nov 12, 2025 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 59

ReleasePackageFixed in
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-base 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-base-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-common 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-common-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-debugsource 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-exporter-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-fuse 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-fuse-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-immutable-object-cache 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-immutable-object-cache-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-mds-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-mgr-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-mib 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-mon-client-nvmeof-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-mon-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-osd-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-radosgw-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-resource-agents 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-selinux 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 ceph-test-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 cephadm 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 cephfs-mirror-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 cephfs-top 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs-daemon-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs-devel 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs-proxy2 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs-proxy2-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs2 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephfs2-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libcephsqlite-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librados-devel 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librados-devel-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librados2 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librados2-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libradospp-devel 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libradosstriper1 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 libradosstriper1-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librbd-devel 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librbd1 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librbd1-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librgw-devel 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librgw2 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 librgw2-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-ceph-argparse 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-ceph-common 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-cephfs 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-cephfs-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rados 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rados-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rbd 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rbd-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rgw 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 python3-rgw-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 rbd-fuse-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 rbd-mirror-debuginfo 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 rbd-nbd 2:19.2.1-292.el9cp
Red Hat · Ceph Storage 8 ceph_storage:8.1::el9 rbd-nbd-debuginfo 2:19.2.1-292.el9cp

Vulnerabilities 2

  • High 7.5
    CVE-2024-47866

    RGW DoS attack with empty HTTP header in S3 object copy

    Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS …

    ceph ceph ceph ceph Debian Ubuntu Azure Linux Alpine
  • Medium 5.4
    CVE-2024-11831

    Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

    A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu npm

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2274457
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2336611
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2355073
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2357806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2362830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2386873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2387009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2390042
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2390980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393479
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2394489
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2397257
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2400637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404655
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2405301
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21068.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-11831
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2312579
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-11831
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-11831
  • article
    https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e
  • article
    https://github.com/yahoo/serialize-javascript/pull/173
  • report
    https://access.redhat.com/security/cve/CVE-2024-47866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2392386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47866
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47866
  • article
    https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8