Lucene search

K
redhatRedHatRHSA-2015:1092
HistoryJun 11, 2015 - 3:49 p.m.

(RHSA-2015:1092) Moderate: ceph-deploy security update

2015-06-1115:49:16
access.redhat.com
15

0.0004 Low

EPSS

Percentile

5.1%

Red Hat Ceph Storage is a massively scalable, open, software-defined
storage platform that combines the most stable version of Ceph with a Ceph
management platform, deployment tools, and support services.

It was discovered that ceph-deploy, a utility for deploying Red Hat Ceph
Storage, would create the keyring file with world readable permissions,
which could possibly allow a local user to obtain authentication
credentials from the keyring file. (CVE-2015-3010, CVE-2015-4053)

All ceph-deploy users are advised to upgrade to this updated package, which
contains backported patches to correct these issues.

0.0004 Low

EPSS

Percentile

5.1%