RHSA-2026:3406HighCVSS 7.5

Red Hat Security Advisory: New container image: rhceph-9.0

Published
February 26, 2026
Last Modified
August 25, 2026

🔗 CVE IDs covered (14)

CVE-2025-50181 →CVE-2025-50182 →CVE-2024-55565 →CVE-2025-6176 →CVE-2025-7783 →CVE-2025-66418 →CVE-2025-66471 →CVE-2026-21441 →CVE-2021-23358 →CVE-2024-45310 →CVE-2024-51744 →CVE-2025-14104 →CVE-2025-22868 →CVE-2025-26791 →

📋 Description

CVE-2021-23358 — nodejs-underscore: Arbitrary code execution via the template function CVE-2024-45310 — runc: runc can be tricked into creating empty files/directories on host CVE-2024-51744 — golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt CVE-2024-55565 — nanoid: nanoid mishandles non-integer values CVE-2025-6176 — Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS CVE-2025-7783 — form-data: Unsafe random function in form-data CVE-2025-14104 — util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-26791 — dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling CVE-2025-50181 — urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation CVE-2025-50182 — urllib3: urllib3 does not control redirects in browsers and Node.js CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

🎯 Affected products25

  • Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:731f7fa196ecfcbe18a567255eb024acb0a9bed40e379914f97d082286e89db6_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:9ca23b76bfed563dbe9e61e456496b683f8ac8bd232b272929cf4088217f1b7e_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:c6dda8058ecebc7d47cc6eb6f6e0b1fc261bb34140d424638b207f770f50d2cb_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:e1952690c30f653c3f2397009d7dbfc99ccf2f05b3643dcfd6bb306539af6aac_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:11f4acab7eb81b844ef593b87d6aa102ee17b1a200f4c2d057a8dc5df731bf75_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:2c8bad4973281d8ccdc6e4473c1ff76730323d59c3a18a948afcb1b5da520fd5_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:5db7079eda6f63fc31478ff997720562c66407dd99e3db5b19bec26b9fbefd78_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:f2793ac49db5fee22b371b28a34e228a02b698f4a0df8f93d649fbb159ded955_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:2a637efb3d93af38cf764a50e3b8265049562c8540315ead097ed1dbee8c1a7e_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:2af95703be42122fd2b6102f7b09c51a803a46e522e9063b7089a101de2de605_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:3fdd2ca33d42b8ccff8a3ce8f28d8ae2f855167f5971a3d5cd58ff3d0199f6fb_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:6862082a36ed2091a6b50d20c3f036b3701df89de3e3cb3ab8b57d78e09cae38_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:53a72419a7e4f4b332b9c6759ff1c389f226e26599236bc770d367c68bba911a_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8c65a91917296ce25845bd673c521448c89140a126216bf939355b40d38770db_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:ca957dd041420e31be585cf8120c079163f660a448e30f67aa51f4509f52cb34_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:d2900877ae6b3efdc8b693672b7bc6ac8d5ff95208a3a2a3ad85dcc03119ec41_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:25e0a506c1234d96d6ef4d4524e1091bd3f7ba84a1ed30ba1ad60c78db22d005_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:5e50f331766db22a5d349e9705ff720e4ed112a2ba047ada4305ad79ce468ec6_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:bbe3dfce113c2fbdb300c7184e3ac18e08319f68245bc3ace9b176af41d8b509_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cac361a6c9b76b8da77c9a2a2cc147b54aebba5e4696f12fec74af7218006b8d_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:1955c8ad978f2e09e524a8e38a53942f0ba6175499bc9643c3bcd9ccb3df308d_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9679161550968a9c68111f57071dd8a128f16d25cb487c45adc799d17a8f4997_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:b8f3434277e55c0d398b7a992afbadeaf8f08cb1b43e3f64956756032111aba6_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:eb8e4c6e5f3ee09686374c0eb73d123990a403c50eee4bd8a1ba2e7f99e4bffd_s390x as a component of Red Hat Ceph Storage 9

✅ Remediation

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.

🔗 References (28)