Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Security update

Fixed packages 128

Vulnerabilities 2

• Medium 6.5
  CVE-2023-43040 Public exploit

  IBM Spectrum Fusion HCI improper access control

  IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

  IBM Spectrum Fusion HCI ceph ceph Debian Ubuntu Azure Linux
  May 13, 2024
• Low 2.6
  CVE-2023-46159

  IBM Storage Ceph denial of service

  IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service from RGW. IBM X-Force ID: 268906.

  IBM Storage Ceph
  Feb 2, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2153448
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2193419
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2211758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215374
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215380
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2216855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2216857
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2224636
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2227806
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2227810
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2227997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2228001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2228039
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2231469
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2232164
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2233444
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2233886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2234610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238665
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239455
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240144
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240586
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240727
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240839
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2244868
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2245335
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2245699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2247232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2248825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2249014
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2249017