Skip to content
OpenAdvisories
Medium RHSA-2021:1518 4 CVEs

Red Hat Security Advisory: Red Hat Ceph Storage 3.3 Security and Bug Fix Update

Published Sep 13, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-ansible 0:3.2.56-1.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-base 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-common 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-debuginfo 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-fuse 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-mds 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-mgr 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-mon 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-osd 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-radosgw 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-selinux 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 ceph-test 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 cephmetrics 0:2.0.10-1.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 cephmetrics-ansible 0:2.0.10-1.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 grafana 0:5.2.4-3.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 libcephfs-devel 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 libcephfs2 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librados-devel 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librados2 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 libradosstriper1 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librbd-devel 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librbd1 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librgw-devel 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 librgw2 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 python-cephfs 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 python-rados 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 python-rbd 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 python-rgw 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 rbd-mirror 2:12.2.12-139.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 tcmu-runner 0:1.4.0-3.el7cp
Red Hat · Ceph Storage 3 ceph_storage:3::el7 tcmu-runner-debuginfo 0:1.4.0-3.el7cp

Vulnerabilities 4

  • Medium 5.8
    CVE-2020-13379 Public exploit Scanner template EPSS 100%

    Server Side Request Forgery in Grafana

    The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to…

    github.com/grafana/grafana grafana Alpine Go
  • Unscored —
    CVE-2020-12059

    An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by…

    ceph ceph Debian Ubuntu
  • Unscored —
    CVE-2020-27781

    User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential p…

    ceph ceph ceph ceph16 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-3139

    In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check…

    tcmu tcmu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1650209
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1652233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1827262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1829821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830329
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1832372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1842390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1871035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1876551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1882724
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1887661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1894426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1896392
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1896448
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1900109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1901897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1906293
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1916045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1947072
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1948050
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1518.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-12059
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12059
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12059
  • article
    https://ceph.io/releases/v13-2-10-mimic-released/
  • report
    https://access.redhat.com/security/cve/CVE-2020-13379
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-13379
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-13379
  • article
    https://grafana.com/blog/2020/06/03/grafana-6.7.4-and-7.0.2-released-with-important-security-fix/
  • article
    https://www.openwall.com/lists/oss-security/2020/06/09/2/
  • report
    https://access.redhat.com/security/cve/CVE-2020-27781
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-27781
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-27781
  • report
    https://access.redhat.com/security/cve/CVE-2021-3139
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3139