What is RHSA-2026:1536?

RHSA-2026:1536 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat Ceph Storage 9.0 Security and Enhancement update

Which CVE IDs does RHSA-2026:1536 cover?

RHSA-2026:1536 covers the following CVE IDs: CVE-2025-30204, CVE-2025-52555, CVE-2023-25153, CVE-2024-11831, CVE-2024-31884. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:1536?

RHSA-2026:1536 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:1536?

RHSA-2026:1536 affects 200 products, including: Red Hat Ceph Storage 9.0 Tools; ansible-collection-ansible-posix-0:1.2.0-1.3.el9ost.noarch as a component of Red Hat Ceph Storage 9.0 Tools; ansible-collection-ansible-posix-0:1.2.0-1.3.el9ost.src as a component of Red Hat Ceph Storage 9.0 Tools; ansible-collection-ansible-posix-0:2.0.0-1.el10cp.noarch as a component of Red Hat Ceph Storage 9.0 Tools; ansible-collection-ansible-posix-0:2.0.0-1.el10cp.src as a component of Red Hat Ceph Storage 9.0 Tools; and others — see the full list on the advisory page.

RHSA-2026:1536MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 9.0 Security and Enhancement update

Vendor

Red Hat Product Security

Published

January 29, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (5)

CVE-2025-30204 →CVE-2025-52555 →CVE-2023-25153 →CVE-2024-11831 →CVE-2024-31884 · pending

📋 Description

CVE-2023-25153 — containerd: OCI image importer memory exhaustion CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2024-31884 — pybind: Improper use of Pybind CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-52555 — ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS

🎯 Affected products200

Red Hat Ceph Storage 9.0 Tools
ansible-collection-ansible-posix-0:1.2.0-1.3.el9ost.noarch as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-ansible-posix-0:1.2.0-1.3.el9ost.src as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-ansible-posix-0:2.0.0-1.el10cp.noarch as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-ansible-posix-0:2.0.0-1.el10cp.src as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-community-general-0:10.7.3-1.el10cp.noarch as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-community-general-0:10.7.3-1.el10cp.src as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-community-general-0:4.0.0-1.1.el9ost.noarch as a component of Red Hat Ceph Storage 9.0 Tools
ansible-collection-community-general-0:4.0.0-1.1.el9ost.src as a component of Red Hat Ceph Storage 9.0 Tools
ceph-2:20.1.0-144.el10cp.src as a component of Red Hat Ceph Storage 9.0 Tools
ceph-2:20.1.0-144.el9cp.src as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el10cp.aarch64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el10cp.ppc64le as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el10cp.s390x as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el10cp.x86_64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el9cp.aarch64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el9cp.ppc64le as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el9cp.s390x as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-2:20.1.0-144.el9cp.x86_64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el10cp.aarch64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el10cp.ppc64le as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el10cp.s390x as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el10cp.x86_64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el9cp.aarch64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el9cp.ppc64le as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el9cp.s390x as a component of Red Hat Ceph Storage 9.0 Tools
ceph-base-debuginfo-2:20.1.0-144.el9cp.x86_64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-common-2:20.1.0-144.el10cp.aarch64 as a component of Red Hat Ceph Storage 9.0 Tools
ceph-common-2:20.1.0-144.el10cp.ppc64le as a component of Red Hat Ceph Storage 9.0 Tools
ceph-common-2:20.1.0-144.el10cp.s390x as a component of Red Hat Ceph Storage 9.0 Tools
+170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 For supported configurations, refer to: https://access.redhat.com/articles/1548993 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Red Hat Product Security does not have a recommended mitigation at this time. Workaround: Red Hat Product Security does not have any recommended mitigations at this time. Please update as patched versions become available.

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products200

✅ Remediation

🔗 References (292)