Skip to content
OpenAdvisories
High RHSA-2025:4238 2 CVEs

Red Hat Security Advisory: Red Hat Ceph Storage 6.1 bug fix update

Published Apr 28, 2025 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 liboath 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 liboath-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 libpskc-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 oath-toolkit 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 oath-toolkit-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 oath-toolkit-debugsource 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 oathtool-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 pam_oath-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el8 pskctool-debuginfo 0:2.6.12-1.el8cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 liboath 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 liboath-debuginfo 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 libpskc-debuginfo 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 oath-toolkit 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 oath-toolkit-debuginfo 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 oath-toolkit-debugsource 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 oathtool-debuginfo 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 pam_oath-debuginfo 0:2.6.12-1.el9cp
Red Hat · Ceph Storage 6 ceph_storage:6.1::el9 pskctool-debuginfo 0:2.6.12-1.el9cp

Vulnerabilities 2

  • High 8.1
    CVE-2024-48916

    Ceph is vulnerable to authentication bypass through RadosGW

    Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC prov…

    ceph ceph ceph ceph Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-47191

    pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context…

    oath-toolkit oath-toolkit oath-toolkit Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2246440
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2247402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2257935
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2266793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2271596
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2283576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2290721
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2299482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2303084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2303112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2303415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2307933
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2308166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2314213
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2315686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2315936
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2317530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2317562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318288
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2321292
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2326137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2337305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2337309
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2343973
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2345553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2345559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2345561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2355037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2357854
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4238.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-47191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2316488
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47191