Red Hat Security Advisory: Red Hat Ceph Storage 4.3 Security and Bug Fix update

Fixed packages 92

Vulnerabilities 3

• High 7.5
  CVE-2020-25658

  Timing attacks in python-rsa

  It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

  Sybren A. Stüvel python-rsa rsa python-rsa Debian Ubuntu PyPI
  Nov 12, 2020
• Unscored —
  CVE-2021-3524

  A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerabilit…

  ceph ceph ceph16 ceph Debian Ubuntu Alpine
  May 17, 2021
• Unscored —
  CVE-2021-3979

  A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectl…

  ceph ceph Debian Ubuntu
  Aug 25, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1786691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1855350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1876860
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1891557
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1896803
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902999
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1906022
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1927574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1936299
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1941775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1951674
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1952571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1955038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1960306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962748
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1964097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1964099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965314
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965504
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965540
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1967532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1975102
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1978643
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1979186
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1981860
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1986684
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1987041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1988171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1990772
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1992178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1992246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995037
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1996765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1997586