RHSA-2026:8568MediumCVSS 5.4

Red Hat Security Advisory: New container image: rhceph-9.0

Published
April 16, 2026
Last Modified
September 7, 2026

🔗 CVE IDs covered (2)

CVE-2025-59436 →CVE-2024-11831 →

📋 Description

CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2025-59436 — ip: Node ip SSRF

🎯 Affected products29

  • Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64 as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le as a component of Red Hat Ceph Storage 9
  • registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64 as a component of Red Hat Ceph Storage 9

✅ Remediation

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)