Red Hat Security Advisory

RHSA-2025:23234

Red Hat Ceph Storage

Released 2025-12-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 7 registry.redhat.io/rhceph/rhceph-7-rhel9

Fixes 2 records

TI-2025-04111 CVE-2025-4598 · GHSA-jx2m-wgq5-5qcj

Systemd-coredump: race condition that allows a local attacker to crash a suid program and…

MEDIUM 55

A vulnerability was found in systemd-coredump.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.01277 Published 2025-05-30 Partial fix · 252.37, 253.32 +12 CWE-364

TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674