Read the docs
Red Hat Security Advisory

RHSA-2025:22548

Red Hat Ceph Storage

Released 2025-12-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197
Priority MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125
Priority MEDIUM 40

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2025-11-19 Partial fix · 2.4.30, 2.6.23 +4 CWE-407
Priority LOW 18

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00426 Published 2024-12-26 Partial fix CWE-1188