Red Hat Security AdvisoryRHSA-2025:9775
Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates
Released 2025-06-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-222.el9cp, ceph-base-2:19.2.1-222.el9cp, ceph-common-2:19.2.1-222.el9cp +28
Fixes 8 records
Priority HIGH 66
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presen…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00339 · Published 2024-10-09 · Partial fix CWE-22
Priority MEDIUM 50
In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2024-07-18 · Partial fix CWE-190
Priority MEDIUM 42
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0142 · Published 2023-02-14 · Partial fix · 2.2.3 CWE-770
Priority LOW 37
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01288 · Published 2023-10-24 · Partial fix · 3.0.1, 2.3.8 CWE-400
Priority LOW 33
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0053 · Published 2022-12-07 · Partial fix · 2022.12.07 CWE-345
Priority LOW 30
IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service from RGW.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00812 · Published 2024-02-02 · Fixed CWE-20
Priority LOW 28
WebOb provides objects for HTTP requests and responses.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00569 · Published 2024-08-14 · Partial fix · 1.8.8 CWE-601
Priority LOW 17
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1LOW 3.5· Adjacent network · No auth · User interaction · EPSS 0.00507 · Published 2023-02-14 · Partial fix · 2.2.3 CWE-20
THREATIST.IORead the docs