RHSA-2026:1858HighCVSS 7.8

Red Hat Security Advisory: Red Hat Ceph Storage

Published
February 3, 2026
Last Modified
August 23, 2026

🔗 CVE IDs covered (6)

CVE-2025-45582 →CVE-2025-61984 →CVE-2025-61985 →CVE-2025-68973 →CVE-2025-6069 →CVE-2025-8291 →

📋 Description

CVE-2025-6069 — cpython: Python HTMLParser quadratic complexity CVE-2025-8291 — cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked CVE-2025-45582 — tar: Tar path traversal CVE-2025-61984 — openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand CVE-2025-61985 — openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand CVE-2025-68973 — GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

🎯 Affected products20

  • Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:11773d80339a92f1499187a70646ff7530ed39051bfe5d9d7b2d1c0d8dd2c7e4_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:82ba6ce7b61237d6495227b6664380ea1bf6a24445a5a8c880915beac6831028_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:ce94e6e42005e716f2abe0a1eb3e1a71b011d857bd0ad642fd9ee3a5750c0b18_arm64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:d87ca1509ba91b81ff2d4a2fb02604f3ebdd2815e7d7d315a9331ef9da3180bf_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:5099084ae1fb27833a3ad6e0b5e2e2ce95b2dfd1170deff7bc6a9e9a581b6ca1_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:eda55f5ed31112e29d02cf0c14de39f0e0bd0136b46d6a3e578d45b01bd16a71_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:f40cc04bf9afa8265ead882d9f18550b4d69cc97bb647511b8f7c2f4d8f47247_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:72a6d9deb9325e43639230b2681640b15bab946025810258796f95315febb7f4_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7593f0bc7a6b312b5b686f0077443f11e9952128801809828e8bd3a73314c116_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7c82e63b4db275f455ef10b251a8093611ad07898386aaf01faad687b461b5d4_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:274893247f4f33f5a3967d50053182476bc15d9c44cbb5a0ccf2e8e0127aa03f_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:57ac50e7fe4d964f6179837eede564a418972513757603b21215687eaa188aa1_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:70ba13e1c4c00e5795662b5bc3435484886df7b73c029e47b534765819162202_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a936e0f9f3ae65fea8f9ea292917fb2d24a786f4fa8b9a6f28423eb67bc47f4_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c8a96598fc95bade62da70e55b47cabb56e63e2744ccbe81c9214ac25fca7a0a_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:d2540df6829a7e0fce0f973a103c59293fecdb75348172a6369046eee29fc4bf_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:28997406d0689952d39b9f3e3bb4c1855fa541d5d0493bba40437d56c10e27c4_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8ac742804b615da940af01a71b3b6bc2dd8f6848bb0fa13317936a68223bcdba_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:fb42631731ce938f897178719946ca84110fe8dc359649d0071cc6d5b795c111_amd64 as a component of Red Hat Ceph Storage 7

✅ Remediation

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Untrusted TAR archives should always be extracted in an empty directory. When multiple untrusted archives need to be extracted, the same directory must not be re-used without removing all content extracted form the previous archive before extracting the next archive. Workaround: To mitigate this issue, users should avoid processing untrusted or unverified input with GnuPG. Exercise caution when handling GnuPG-encrypted or signed data from unknown or suspicious sources, as specially crafted input could trigger the vulnerability. This operational control reduces the attack surface by limiting exposure to malicious data.

🔗 References (10)