Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates

Fixed packages 110

Vulnerabilities 10

• High 8.6
  CVE-2022-34749

  Mistune vulnerable to catastrophic backtracking

  In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.

  mistune mistune mistune python-mistune Debian Ubuntu Azure Linux Alpine PyPI
  Jul 25, 2022
• High 7.5
  CVE-2024-47866

  RGW DoS attack with empty HTTP header in S3 object copy

  Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS …

  ceph ceph ceph ceph Debian Ubuntu Azure Linux Alpine
  Nov 12, 2025
• High 7.5
  CVE-2025-47913

  Potential denial of service in golang.org/x/crypto/ssh/agent

  SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

  golang.org/x/crypto golang.org/x/crypto/ssh/agent k3s-static-1.32 falco-no-driver Debian Ubuntu Azure Linux Wolfi Go
  Nov 13, 2025
• High 7.5
  CVE-2025-61729

  Excessive resource consumption when printing error string for host certificate validation in crypto/x509

  Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certi…

  Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 2, 2025
• Medium 6.5
  CVE-2025-52555

  CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS

  Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to …

  ceph ceph ceph ceph Debian Azure Linux
  Jun 26, 2025
• Medium 5.4
  CVE-2024-11831

  Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

  A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu npm
  Feb 10, 2025
• Medium 4.5
  CVE-2025-26791

  DOMPurify allows Cross-site Scripting (XSS)

  DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

  cure53 DOMPurify grafana-image-renderer dompurify Debian Ubuntu Wolfi npm
  Feb 14, 2025
• Medium 4.3
  CVE-2024-55565

  Predictable results in nanoid generation when given non-integer values

  nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

  katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas katib-suggestion-skopt-enas Debian Ubuntu Wolfi npm
  Dec 9, 2024
• Low 3.3
  CVE-2021-23358 Public exploit

  Arbitrary Code Injection

  The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

  js-jquery underscore underscore underscore Debian Ubuntu Azure Linux npm
  Mar 29, 2021
• Low 3.1
  CVE-2024-51744

  Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

  golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and …

  golang-jwt jwt katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go
  Nov 4, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1944286
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2112230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2312579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323735
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2329426
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2345695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360974
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2372611
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374412
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392386
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392861
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2404076
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2404656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2404880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2412237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2412474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414844
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416314
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2418462
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2428617
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2432069
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json
• report
  https://access.redhat.com/security/cve/CVE-2021-23358
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23358
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23358
• report
  https://access.redhat.com/security/cve/CVE-2022-34749
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-34749
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-34749
• article
  https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2
• report
  https://access.redhat.com/security/cve/CVE-2024-11831
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-11831
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-11831
• article
  https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e
• article
  https://github.com/yahoo/serialize-javascript/pull/173