Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update

Fixed packages 71

Vulnerabilities 3

• High 8.6
  CVE-2022-34749

  Mistune vulnerable to catastrophic backtracking

  In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.

  mistune mistune mistune python-mistune Debian Ubuntu Azure Linux Alpine PyPI
  Jul 25, 2022
• High 7.5
  CVE-2019-10790

  TaffyDB can allow access to any data items in the DB

  taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data …

  kubeflow-centraldashboard taffydb taffy Wolfi npm
  Feb 17, 2020
• Medium 4.3
  CVE-2025-58183

  Unbounded allocation when parsing GNU sparse map in archive/tar

  tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archiv…

  Go standard library archive/tar katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 29, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2112230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151848
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250568
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2320312
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356539
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406674
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2407258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2411968
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2412473
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2413969
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414843
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2415380
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2415838
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416558
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416559
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416987
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2417015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2417688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2421434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2421706
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2421743
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423404
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2424278
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2427566
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2431960
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2432068
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2432370
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2711.json
• report
  https://access.redhat.com/security/cve/CVE-2019-10790
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10790
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10790
• article
  https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450
• article
  https://snyk.io/vuln/SNYK-JS-TAFFY-546521
• article
  https://www.npmjs.com/package/taffy