Red Hat Security Advisory: Red Hat Ceph Storage 3.2 security, bug fix, and enhancement update

Fixed packages 28

Vulnerabilities 2

• Medium 6.1
  CVE-2018-12099

  Grafana Cross-site Scripting (XSS)

  Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.

  grafana github.com/grafana/grafana Ubuntu Go
  Jun 11, 2018
• Unscored —
  CVE-2018-19039

  Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Edito…

  grafana Ubuntu
  Dec 13, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/3.2/html/release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1506782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1540881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1600138
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636251
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638092
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639833
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1648168
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1649697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1653307
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1656935
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660962
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666407
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666408
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668050
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669901
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670663
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1672333
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1672878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1673687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1674549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1678470
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1679263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1680171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1683997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1684146
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1684283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1684289
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1684435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1684642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1685733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1685735