RHSA-2026:2800HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ceph Storage

Published
February 17, 2026
Last Modified
August 31, 2026

🔗 CVE IDs covered (6)

CVE-2024-31884 · pendingCVE-2025-6176 →CVE-2025-7783 →CVE-2025-14104 →CVE-2025-66418 →CVE-2025-66471 →

📋 Description

CVE-2024-31884 — pybind: Improper use of Pybind CVE-2025-6176 — Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS CVE-2025-7783 — form-data: Unsafe random function in form-data CVE-2025-14104 — util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data

🎯 Affected products20

  • Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:014ca9e66e06e96ddba3dd24f9796dbd423a737b4251f3ee3707373c0dd8e5a9_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:1dd48448925ea6f01b931123341c64c9c36be26522ca2949a2582c503b4d9813_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:81c6a248c341927ff595c3bda38576f83aafc2bb5305e4fd82ec2d037a8a6795_arm64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:d7e8d93331a4bab6da651c54e889d2276d7681f15fc8e6aeff4b1964463894ef_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:22b40eda7694aa76f9c327b90cfe9090f3afc49efe792b512557e7f85adbb5fc_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:70f461842375bb3f8a95d21f3bd24e656a256375e719c40e8dffbca2e1f477fc_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:c3aed3c0baf2a107ba6df0b25588b56a0f7ae18c9b8a9e71db725629f0a2d8cd_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:485411749726179fe5cd880e2cf308261b35150e4b356ddb7100f52e02b2e353_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:c22fa89f545b3a8ae37cddadbea46d5bb51b8178929a67254bd2a133f4c0f221_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:df2032db9a082aa0d08adfc76a18d65548d2c2f14dedad0dc35bc0117aca42b8_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:0a162811f3d4d6c648c95896a2eb649836c459d62d1c2baf8fa617cac78453c4_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:13cf40d4e5330176358d8c9a726933d4ed814042ae31705dc43983dabf20c10a_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:38a810ddc53e87aa286db2db075fbc8095302f5a5dc019faeea5a6095c595b57_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:329dba4f10a52c84359451c09647cbf9978792ec9f7b72dea9f4162229d1b804_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:a57259020a57641ef473e2476cf80eb93c3e5399d99355b4a218f8a0bf6e2afb_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:cffa01568a8d3dbc3e497151721be43a628fb4e0e50a86fc9da24604c1206712_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:02e713e61e7f54be3a0d67ec9162bf540922a54a51c10c8574b3385227121956_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:89b4f2be86bcddb502502486bc6014113892a977d74d3ef9dd80a38e53dc7461_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e14ee8fdaed88f74a7027a4b427d64c7e7169725507b6f41b5504904acd39a41_s390x as a component of Red Hat Ceph Storage 7

✅ Remediation

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)