The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-proxyUpgrade ceph-osd-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-fuse-debuginfoUpgrade rbd-nbdUpgrade librgw2-debuginfoUpgrade ceph-selinuxUpgrade ceph-mdsUpgrade nfs-ganesha-debuginfoUpgrade ceph-mds-debuginfoUpgrade python-cephfsUpgrade python-rgwUpgrade librgw2Upgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-mirrorUpgrade rbd-fuse-debuginfoUpgrade ceph-test-debuginfoUpgrade librbd-develUpgrade ceph-mon-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-medicUpgrade nfs-ganesha-rgwUpgrade ceph-radosgwUpgrade python3-cephfs-debuginfoUpgrade python3-radosUpgrade ceph-ansibleUpgrade python-ceph-argparseUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade python3-cephfsUpgrade python3-rados-debuginfoUpgrade python3-rgwUpgrade libradosstriper1Upgrade ceph-fuseUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade librgw-develUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade librados-devel-debuginfoUpgrade ceph-debugsourceUpgrade python3-rbdUpgrade nfs-ganesha-vfsUpgrade libradospp-develUpgrade rbd-nbd-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-debugsourceUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libcephfs-develUpgrade cockpit-ceph-installerUpgrade rbd-mirror-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-selinuxUpgrade librados-develUpgrade libcephfs2-debuginfoUpgrade ceph-mgr-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librbd1Upgrade python-rbdUpgrade python-radosUpgrade librados2Upgrade ceph-common | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-rbdUpgrade librbd1Upgrade ceph-commonUpgrade python-radosUpgrade librados2 | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librados2Upgrade cephUpgrade librbd1Upgrade python-rados | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade ceph-radosgw-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-debugsourceUpgrade libradosstriper1Upgrade nfs-ganesha-rados-graceUpgrade ceph-medicUpgrade nfs-ganeshaUpgrade python3-rbdUpgrade rbd-nbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python-cephfsUpgrade ceph-mds-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python-ceph-argparseUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rgwUpgrade ceph-selinuxUpgrade python3-rgwUpgrade python3-cephfs-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-fuse-debuginfoUpgrade librbd-develUpgrade rbd-nbdUpgrade nfs-ganesha-proxyUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-selinuxUpgrade python3-cephfsUpgrade librgw2Upgrade ceph-debugsourceUpgrade librgw-develUpgrade rbd-mirrorUpgrade nfs-ganesha-debuginfoUpgrade python3-radosUpgrade ceph-commonUpgrade nfs-ganesha-rgw-debuginfoUpgrade librados-develUpgrade libcephfs-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libcephfs2Upgrade ceph-mdsUpgrade ceph-radosgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade librados-devel-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-ansibleUpgrade ceph-fuseUpgrade ceph-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade librgw2-debuginfoUpgrade python-rgwUpgrade libradosstriper1-debuginfoUpgrade ceph-grafana-dashboards | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade rbd-mirrorUpgrade libcephfs-develUpgrade librbd1Upgrade ceph-commonUpgrade ceph-mgr-rookUpgrade python3-radosUpgrade ceph-grafana-dashboardsUpgrade librgw-develUpgrade librados-develUpgrade python-rbdUpgrade ceph-baseUpgrade ceph-monUpgrade libcephfs2Upgrade ceph-mgrUpgrade libradosstriper-develUpgrade rbd-nbdUpgrade ceph-mgr-sshUpgrade cephfs-shellUpgrade ceph-mgr-k8seventsUpgrade ceph-prometheus-alertsUpgrade libradospp-develUpgrade rados-objclass-develUpgrade ceph-fuseUpgrade ceph-mgr-dashboardUpgrade python-rgwUpgrade ceph-osdUpgrade ceph-mgr-diskprediction-localUpgrade librbd-develUpgrade python-radosUpgrade ceph-testUpgrade python3-cephfsUpgrade ceph-resource-agentsUpgrade ceph-mdsUpgrade python3-ceph-argparseUpgrade rbd-fuseUpgrade librados2Upgrade ceph-dashboard-e2eUpgrade libradosstriper1Upgrade librgw2Upgrade python-cephfsUpgrade ceph-mgr-diskprediction-cloudUpgrade python3-rgwUpgrade ceph-radosgwUpgrade python3-rbdUpgrade ceph | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade cephUpgrade ceph-commonUpgrade ceph-base | Sep 23, 2020 | Jun 25, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub