CVE-2019-19646 affecting package ceph for versions less than 18.2.1-1

CVE-2019-19646 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-11656 affecting package ceph for versions less than 18.2.1-1

CVE-2020-11656 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20506 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20506 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-1129 affecting package ceph for versions less than 18.2.1-1

CVE-2018-1129 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-19645 affecting package ceph for versions less than 18.2.1-1

CVE-2019-19645 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13435 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13435 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1

CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13630 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13630 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3854 affecting package ceph for versions less than 18.2.1-1

CVE-2022-3854 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-27304 affecting package ceph for versions less than 18.2.1-1

CVE-2020-27304 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

kernel security, bug fix, and enhancement update

4.18.0-513.24.19.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

A flaw was found in Ceph relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW causing a denial of service.

...

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump and dump privileged information.

...

CVE-2024-26689

A use-after-free flaw was found in the Linux kernel’s experimental Ceph distributed file system. This flaw allows a local user to crash the system...