Red Hat Security Advisory

RHSA-2025:23227

Red Hat Ceph Storage

Released 2025-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9

Fixes 3 records

TI-2025-04111 CVE-2025-4598 · GHSA-jx2m-wgq5-5qcj

Systemd-coredump: race condition that allows a local attacker to crash a suid program and…

MEDIUM 55

A vulnerability was found in systemd-coredump.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.01277 Published 2025-05-30 Partial fix · 252.37, 253.32 +12 CWE-364

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

Resource allocation without limits in libexpat

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770

TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674