Red Hat Security AdvisoryRHSA-2025:4664
Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates
Released 2025-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-329.el8cp, ceph-2:18.2.1-329.el9cp, ceph-base-2:18.2.1-329.el8cp +47
Fixes 9 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority HIGH 68
Ceph is a distributed object, block, and file storage platform.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00221 · Published 2025-07-30 · Partial fix CWE-345
Priority HIGH 66
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presen…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00339 · Published 2024-10-09 · Partial fix CWE-22
Priority MEDIUM 63
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
CVSS 3.1MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.00867 · Published 2023-11-14 · Partial fix · 2.14.1 CWE-639
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01952 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority MEDIUM 42
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0142 · Published 2023-02-14 · Partial fix · 2.2.3 CWE-770
Priority MEDIUM 41
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03397 · Published 2024-05-06 · Partial fix · 3.0.3 CWE-352
Priority LOW 28
WebOb provides objects for HTTP requests and responses.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00569 · Published 2024-08-14 · Partial fix · 1.8.8 CWE-601
Priority LOW 17
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1LOW 3.5· Adjacent network · No auth · User interaction · EPSS 0.00507 · Published 2023-02-14 · Partial fix · 2.2.3 CWE-20
THREATIST.IORead the docs