Red Hat Security Advisory

RHSA-2025:4238

Red Hat Ceph Storage 6.1 bug fix update

Released 2025-04-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 6.1 Tools liboath-2.6.12-1.el8cp, liboath-2.6.12-1.el9cp, oath-toolkit-2.6.12-1.el8cp +1

Fixes 2 records

TI-2024-32613 CVE-2024-48916

Ceph is vulnerable to authentication bypass through RadosGW

HIGH 68

Ceph is a distributed object, block, and file storage platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00221 Published 2025-07-30 Partial fix CWE-345

TI-2024-31557 CVE-2024-47191 · GHSA-w8jp-q8g4-9f42

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege…

HIGH 66

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presen…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00339 Published 2024-10-09 Partial fix CWE-22