Red Hat Security Advisory

RHSA-2026:1536

Red Hat Ceph Storage 9.0 Security and Enhancement update

Released 2026-01-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 9.0 Tools ceph-2:20.1.0-144.el10cp, ceph-2:20.1.0-144.el9cp, ceph-base-2:20.1.0-144.el10cp +47

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405

TI-2025-32650 CVE-2025-52555

LOW 28

Ceph is a distributed object, block, and file storage platform.

CVSS 3.1MEDIUM 6.5 Adjacent network Low privileges No interaction EPSS 0.00209 Published 2025-06-26 Partial fix · 18.2.5, 19.2.3 CWE-269

TI-2023-10615 CVE-2023-25153 · GHSA-259w-8hf6-59c2

LOW 28

containerd is an open source container runtime.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00363 Published 2023-02-16 Partial fix · 1.5.18, 1.6.18 CWE-770

TI-2024-10975 CVE-2024-11831 · GHSA-76p7-773f-r4q5

LOW 27

A flaw was found in npm-serialize-javascript.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01122 Published 2025-02-10 Partial fix · 6.0.2, 4.4.8-2 +27 CWE-79