The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | May 17, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 17, 2021 |
| Centos_linux | — | Upgrade ceph-osd-debuginfoUpgrade cephfs-topUpgrade ceph-iscsiUpgrade libradospp-develUpgrade ceph-baseUpgrade ceph-debugsourceUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade python3-cephfs-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade python3-rgw-debuginfoUpgrade libcephfs2Upgrade libntirpc-debuginfoUpgrade libradosstriper1Upgrade cephadmUpgrade nfs-ganesha-rgwUpgrade cephadm-ansibleUpgrade python-rgwUpgrade python3-ceph-commonUpgrade python3-rgwUpgrade ceph-mon-debuginfoUpgrade python-ceph-argparseUpgrade ceph-common-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-rados-urlsUpgrade libntirpc-debugsourceUpgrade python3-radosUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-ceph-argparseUpgrade libradosstriper1-debuginfoUpgrade librbd-develUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-rgw-debuginfoUpgrade librgw2Upgrade librados-develUpgrade tcmu-runnerUpgrade librgw2-debuginfoUpgrade cephfs-mirrorUpgrade ceph-fuseUpgrade rbd-nbdUpgrade libtcmuUpgrade librgw-develUpgrade ceph-radosgwUpgrade ceph-fuse-debuginfoUpgrade libntirpcUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-mirrorUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-commonUpgrade ceph-immutable-object-cacheUpgrade ceph-ansibleUpgrade python3-rbdUpgrade nfs-ganesha-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libcephfs2-debuginfoUpgrade ceph-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-proxy-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-mds | Apr 5, 2022 | May 17, 2021 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | May 17, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-radosUpgrade python-rbdUpgrade ceph-commonUpgrade librbd1Upgrade librados2 | May 25, 2022 | May 17, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ceph-commonUpgrade python-radosUpgrade python-rbdUpgrade librbd1Upgrade librados2 | Apr 26, 2022 | May 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade librbd1Upgrade python-rbd | Aug 10, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade nfs-ganesha-proxyUpgrade python-rgwUpgrade ceph-iscsiUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-common-debuginfoUpgrade ceph-radosgwUpgrade ceph-selinuxUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade ceph-ansibleUpgrade libntirpcUpgrade librbd-develUpgrade nfs-ganesha-rados-urlsUpgrade libradosstriper1Upgrade libntirpc-debuginfoUpgrade nfs-ganeshaUpgrade librgw2Upgrade cephfs-topUpgrade python3-radosUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-cephfsUpgrade ceph-test-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade libradosstriper1-debuginfoUpgrade ceph-immutable-object-cacheUpgrade nfs-ganesha-debugsourceUpgrade rbd-nbdUpgrade ceph-fuse-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-resource-agentsUpgrade nfs-ganesha-ceph-debuginfoUpgrade python-ceph-argparseUpgrade ceph-debuginfoUpgrade ceph-base-debuginfoUpgrade python-cephfsUpgrade ceph-mdsUpgrade rbd-mirrorUpgrade cephadmUpgrade cephadm-ansibleUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rgwUpgrade ceph-baseUpgrade librgw-develUpgrade python3-cephfs-debuginfoUpgrade libcephsqlite-debuginfoUpgrade libntirpc-debugsourceUpgrade librgw2-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-commonUpgrade cephfs-mirrorUpgrade python3-rbdUpgrade tcmu-runnerUpgrade python3-ceph-commonUpgrade ceph-debugsourceUpgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-mirror-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-ceph-argparseUpgrade rbd-nbd-debuginfoUpgrade librados-develUpgrade python3-rados-debuginfoUpgrade libtcmuUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libradospp-develUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs-devel | Apr 5, 2022 | May 17, 2021 |
| Suse | — | Upgrade cephadmUpgrade rbd-fuseUpgrade ceph-mdsUpgrade librgw2Upgrade cephfs-shellUpgrade ceph-mgr-k8seventsUpgrade python3-rgwUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-modules-coreUpgrade librbd-develUpgrade python3-ceph-argparseUpgrade ceph-prometheus-alertsUpgrade cephUpgrade ceph-osdUpgrade rados-objclass-develUpgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade ceph-radosgwUpgrade ceph-mgr-cephadmUpgrade libradospp-develUpgrade python3-cephfsUpgrade ceph-mgr-dashboardUpgrade rbd-mirrorUpgrade librgw-develUpgrade ceph-immutable-object-cacheUpgrade python3-radosUpgrade librbd1Upgrade ceph-fuseUpgrade libcephfs-develUpgrade python3-ceph-commonUpgrade ceph-monUpgrade python3-rbdUpgrade librados2Upgrade librados-develUpgrade rbd-nbdUpgrade ceph-mgr-rookUpgrade ceph-baseUpgrade ceph-mgrUpgrade ceph-grafana-dashboardsUpgrade ceph-commonUpgrade libcephfs2 | Jun 3, 2021 | May 17, 2021 |
| Ubuntu | — | Upgrade ceph (Ubuntu Pro)Upgrade ceph-mgr-diskprediction-cloudUpgrade ceph-common (Ubuntu Pro)Upgrade radosgwUpgrade ceph-mgr-dashboardUpgrade ceph-commonUpgrade cephadmUpgrade ceph-mgrUpgrade ceph-mgr-cephadmUpgrade radosgw (Ubuntu Pro)Upgrade ceph-mgr-modules-coreUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-diskprediction-localUpgrade ceph-baseUpgrade cephUpgrade ceph-mgr-rook | Jun 25, 2021 | May 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub