RHSA-2026:2711 - Security Advisory

Topic

An update is now available for Red Hat Ceph Storage 8.1.

Description

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

These new packages include numerous security updates, bug fixes, and a known issue. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most significant of these changes:

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/8/html/8.1_release_notes

==========================================
IMPORTANT:
The Red Hat Ceph Storage team has migrated our defect tracking from Bugzilla to an internal Jira system. Bug fixes and CVE information that was previously listed in the errata releases are now listed in the Release Notes.

During the migration period, some defect details might still appear temporarily in the Errata. However, the release notes contain the most current and authoritative information, including the complete list of fixes and security updates.

Refer to the release notes going forward for the latest and most accurate fix and CVE information.
==========================================

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

For supported configurations, refer to:

https://access.redhat.com/articles/1548993

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64

Fixes

• BZ - 2112230 - CVE-2022-34749 mistune: catastrophic backtracking
• BZ - 2151848 - Alerts module fails to send alerts if smtp_ssl is enabled
• BZ - 2250568 - [8.1z Backport] [CEE] mon_memory_target is ignored at startup when set without mon_memory_autotune in the config database
• BZ - 2320312 - Enable "--force" flag while deleting nvmeof subsystem listeners with active connections
• BZ - 2325394 - Unable to add/delete listeners under NVMeoF UI dashboard post upgrade from 7.1z2
• BZ - 2356539 - [8.0 Backport] - Error message is not descriptive for ceph tell command
• BZ - 2389907 - CVE-2024-31884 pybind: Improper use of Pybind
• BZ - 2389970 - CVE-2019-10790 taffy: taffydb: Internal Property Tampering
• BZ - 2406674 - [Backport] RGW Backport for PutObjectLockConfiguration can enable object lock on existing buckets
• BZ - 2407258 - CVE-2025-58183 golang: archive/tar: Unbounded allocation when parsing GNU sparse map
• BZ - 2411968 - Group replayer shutdown can hang in the face of active m_in_flight_op_tracker ops [8.1z]
• BZ - 2412473 - [RGW]: When "bucket_index_max_shards" is set to 0 in the zone group , and bucket has num_shards 0 , the "object unlink" fails
• BZ - 2413969 - [rgw] public-access-block with BlockPublicAcls set on a Bucket is denying normal object upload without any public-acl in the request
• BZ - 2414843 - [8.1z backport] [IBM_Support] Application Pod stays in Init state as the CephFS VolumeAttachment doesn't complete.
• BZ - 2415380 - [8.1z Backport] [rgw] s3:GetObjectAttributes or s3:GetObject permission alone is allowing other users to perform the operation in the sts/bucket policy
• BZ - 2415838 - [GSS][CephFS] MDS crassed executing asok_command: dump tree with assert ceph::__ceph_assert_fail(char const*, char const*, int, char const*)
• BZ - 2416558 - [RDR][RBD] Syncing stopped "daemon_health: UNKNOWN" post shutdown and recovery of managed cluster [8.1z]
• BZ - 2416559 - rbd-mirror daemon restart fails to resume partially synced demote snapshot synchronization on secondary [8.1z]
• BZ - 2416777 - [RDR] A few RBD images report error due to incomplete group snapshots on the secondary cluster after workload deployment [8.1z]
• BZ - 2416987 - [8.1z Backport][IBM_Support] pg_autoscaler is calculating correctly but not implementing PG counts and changes, due to high threshold
• BZ - 2417015 - [8.1z Backport] [10k osd] segmentation fault osd : tick_without_osd_lock()
• BZ - 2417688 - [IBM_Support] [Ceph-Dashboard] Accessing RGW ratelimit for user fails with error: failed to get a ratelimit for user id: 'UID', errno: (2) No such file or directory
• BZ - 2421434 - [8.1z Backport] cephadm crashes and doesn't recover with ganesha-rados-grace tool failed: Failure: -126
• BZ - 2421706 - [8.1z Backport] [GSS] unable to see old metrics using loki query after upgrade 6 to 7
• BZ - 2421743 - [8.1z Backport] Prometheus module error causing cluster to go to HEALTH_ERR
• BZ - 2423404 - [8.1z5] OSD crashes with ceph_assert(diff <= bytes_per_au[pos])
• BZ - 2424278 - [8.1z Backport] prevent map corruption while processing beacons from gws deleted from the pending-map
• BZ - 2427566 - Observing slow_ops on a mon daemon post site down tests in a 3 AZ cluster
• BZ - 2431960 - [8.1z Backport][GSS]ceph-mds crashed - mds-rank-fin
• BZ - 2432068 - [GSS] ceph-crash not authenticating with cluster correctly
• BZ - 2432370 - ceph nfs cluster create cephfs-nfs command returns "no valid command found"

CVEs

• CVE-2019-10790
• CVE-2022-34749
• CVE-2024-31884
• CVE-2025-58183

References

• https://access.redhat.com/security/updates/classification/#important