Red Hat Security Advisory: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update

Fixed packages 24

Vulnerabilities 3

• Unscored —
  CVE-2018-10861

  A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can …

  Red Hat ceph ceph ceph Debian Ubuntu
  Jul 10, 2018
• Unscored —
  CVE-2018-1128

  It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay atta…

  Red Hat ceph linux ceph Debian Ubuntu
  Jul 10, 2018
• Unscored —
  CVE-2018-1129

  A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having acce…

  Red Hat ceph linux ceph Debian Azure Linux
  Jul 10, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2.5/html/release_notes/bug_fixes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1448084
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1515341
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1522881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1548071
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1554963
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1563825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568897
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1574231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1575866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1576057
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1581579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584218
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584829
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1595374
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1595383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1595386
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1599507
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2261.json
• report
  https://access.redhat.com/security/cve/CVE-2018-1128
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1128
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1128
• report
  https://access.redhat.com/security/cve/CVE-2018-1129
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1129
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1129
• report
  https://access.redhat.com/security/cve/CVE-2018-10861
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10861
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10861