AZL-38929 CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c...

AZL-38146 CVE-2020-13630 affecting package ceph for versions less than 18.2.1-1

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature...

ceph14 -- HTTP header injection via CORS ExposeHeader tag

Red Hat bugzilla reports: A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection ...

AZL-38965 CVE-2020-13435 affecting package ceph for versions less than 18.2.1-1

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

AZL-38614 CVE-2020-13434 affecting package ceph for versions less than 18.2.1-1

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

Red Hat Ceph Authorization Issues Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 4.1 security, bug fix, and enhancement update

Red Hat Ceph Storage 4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...

ceph-ansible: hard coded credential in ceph-ansible playbook

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...

AZL-38845 CVE-2020-10722 affecting package ceph for versions less than 18.2.2-1

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...

AZL-38527 CVE-2020-10724 affecting package ceph for versions less than 18.2.2-1

A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read...

AZL-38977 CVE-2020-10723 affecting package ceph for versions less than 18.2.2-1

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index a UInt is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption...

RLSA-2020:2231 Important: Rocky Enterprise Software Foundation Ceph Storage 4.1 security, bug fix, and enhancement update

Rocky Enterprise Software Foundation Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. Security Fixes: ceph-ansible: hard coded credentia...

Rocky Enterprise Software Foundation Ceph Storage 4.1 security, bug fix, and enhancement update

An update is available for smartmontools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Ceph Storage is a scalable, open,...

CVE-2020-10736

An authorization bypass vulnerability was found in Ceph versions 15.2.0 and later, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly...

Photon OS 2.0: Ceph PHSA-2020-2.0-0240

An update of the ceph package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0240. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136567;...

Fedora: Security Advisory for ceph (FEDORA-2020-81b9c6cddc)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important Photon OS Security Update - PHSA-2020-0240

Updates of 'ceph' packages of Photon OS have been released...

[SECURITY] Fedora 31 Update: ceph-14.2.9-1.fc31

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage...

Fedora 31 : 2:ceph (2020-81b9c6cddc)

ceph-14.2.9 GA Security fix for CVE-2020-1760 ceph: header-splitting in RGW GetObject has a possible XSS Security fix for CVE-2020-1759 ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions Note that Tenable Network Security has extracted the precedi...

Photon OS 2.0: Ceph PHSA-2020-2.0-0237

An update of the ceph package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0237. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136326;...