RHSA-2025:22548HighCVSS 8.8
Red Hat Security Advisory: Red Hat Ceph Storage
🔗 CVE IDs covered (5)
📋 Description
CVE-2024-56433 — shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2025-6965 — sqlite: Integer Truncation in SQLite CVE-2025-9230 — openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-11230 — haproxy: denial of service vulnerability in HAProxy mjson library CVE-2025-11561 — sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2025:22548
- externalhttps://access.redhat.com/security/cve/cve-2024-56433
- externalhttps://access.redhat.com/security/cve/cve-2025-9230
- externalhttps://access.redhat.com/security/cve/cve-2025-6965
- externalhttps://access.redhat.com/security/cve/cve-2025-11561
- externalhttps://access.redhat.com/security/cve/CVE-2025-11230
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_ceph_storage/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22548.json