RHSA-2026:2769 - Security Advisory

标题

An update is now available for Red Hat Ceph Storage 7.1.

描述

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

These new packages include numerous security and bug fixes. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most significant of these changes:

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/7/html/7.1_release_notes

==========================================
IMPORTANT:
The Red Hat Ceph Storage team has migrated our defect tracking from Bugzilla to an internal Jira system. Bug fixes and CVE information that was previously listed in the errata releases are now listed in the Release Notes.

During the migration period, some defect details might still appear temporarily in the Errata. However, the release notes contain the most current and authoritative information, including the complete list of fixes and security updates.

Refer to the release notes going forward for the latest and most accurate fix and CVE information.
==========================================

解决方案

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

For supported configurations, refer to:

https://access.redhat.com/articles/1548993

受影响的产品

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le

修复

• BZ - 1944286 - CVE-2021-23358 nodejs-underscore: Arbitrary code execution via the template function
• BZ - 2112230 - CVE-2022-34749 mistune: catastrophic backtracking
• BZ - 2272997 - Upgrade to newer versions of table , graph, piechart panels in grafana dashboards for grafana 10
• BZ - 2273911 - [Ceph-Dashboard]: Token import throws internal server error which results in multisite configuration failure
• BZ - 2312579 - CVE-2024-11831 npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript
• BZ - 2323735 - CVE-2024-51744 golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt
• BZ - 2329426 - [7.1z Backport] [CEE] mon_memory_target is ignored at startup when set without mon_memory_autotune in the config database
• BZ - 2345695 - CVE-2025-26791 dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling
• BZ - 2360974 - [GSS] Ceph RGW - LC ERROR on expiration of delete marker with null versionId
• BZ - 2372611 - upload-part-copy fails when object name contains % in it
• BZ - 2374412 - CVE-2025-52555 ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS
• BZ - 2389907 - CVE-2024-31884 pybind: Improper use of Pybind
• BZ - 2392386 - CVE-2024-47866 rgw: RGW DoS attack with empty HTTP header in S3 object copy
• BZ - 2392861 - [RGW-Versioning] [18.2.1] Listing a bucket having ~100K versions of an object logs repeated "marker failed to make forward progress" errors
• BZ - 2404076 - [7.1]: Deleting an rgw realm, does not clear the 'realm_id' and it is listed in the 'default_info'
• BZ - 2404656 - [7.1z backport][GSS] [RGW]: segfault: (RGWRados::remove_objs_from_index(DoutPrefixProvider const*, RGWBucketInfo&, std::__cxx11::list<rgw_obj_index_key, std::allocator<rgw_obj_index_key> > const&)+0x10bd) [0x5617746101bd]
• BZ - 2404880 - [GSS] OSD_UNREACHABLE alerts in ceph cluster post upgrade to reef
• BZ - 2412237 - RGW crash observed during copy-object ops with copy-source being empty
• BZ - 2412474 - [RGW]: When "bucket_index_max_shards" is set to 0 in the zone group , and bucket has num_shards 0 , the "object unlink" fails
• BZ - 2414844 - [7.1z Backport] [IBM_Support] Application Pod stays in Init state as the CephFS VolumeAttachment doesn't complete.
• BZ - 2414943 - CVE-2025-47913 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
• BZ - 2416314 - [7.1z backport][GSS][CephFS] MDS crassed executing asok_command: dump tree with assert ceph::__ceph_assert_fail(char const*, char const*, int, char const*)
• BZ - 2418462 - CVE-2025-61729 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate
• BZ - 2428617 - Cephadm bootstrap failed with error "cannot import name 'soft_unicode' from 'markupsafe'"
• BZ - 2432069 - [GSS] ceph-crash not authenticating with cluster correctly

CVE

• CVE-2021-23358
• CVE-2022-34749
• CVE-2024-11831
• CVE-2024-31884
• CVE-2024-47866
• CVE-2024-51744
• CVE-2024-55565
• CVE-2025-26791
• CVE-2025-47913
• CVE-2025-52555
• CVE-2025-61729

参考

• https://access.redhat.com/security/updates/classification/#important