A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jul 25, 2022 |
| Centos_linux | — | Upgrade librados-devel-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rgwUpgrade librgw-develUpgrade ceph-baseUpgrade libcephfs2Upgrade libpskc-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libunwind-debuginfoUpgrade cephadm-ansibleUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-rgwUpgrade rbd-mirror-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-ceph-argparseUpgrade librgw2-debuginfoUpgrade libcephsqlite-debuginfoUpgrade rbd-nbd-debuginfoUpgrade cephfs-mirrorUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rbdUpgrade ceph-base-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade ceph-commonUpgrade librados-develUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade leveldb-debuginfoUpgrade libcephfs-develUpgrade libradospp-develUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-debugsourceUpgrade python3-rados-debuginfoUpgrade gperftools-debugsourceUpgrade gperftools-libsUpgrade libcephfs2-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mds-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade pskctool-debuginfoUpgrade oathtool-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-fuse-debuginfoUpgrade ceph-mdsUpgrade ceph-common-debuginfoUpgrade leveldb-debugsourceUpgrade liboathUpgrade nfs-ganeshaUpgrade liboath-debuginfoUpgrade oath-toolkit-debuginfoUpgrade nfs-ganesha-cephUpgrade libunwindUpgrade librgw2Upgrade libradosstriper1Upgrade gperftools-libs-debuginfoUpgrade ceph-fuseUpgrade oath-toolkit-debugsourceUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libunwind-debugsourceUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-selinuxUpgrade ceph-mon-debuginfoUpgrade ceph-mibUpgrade cephfs-topUpgrade python3-ceph-commonUpgrade ceph-test-debuginfoUpgrade ceph-ansibleUpgrade python3-radosUpgrade nfs-ganesha-rados-graceUpgrade leveldbUpgrade cephadmUpgrade ceph-resource-agentsUpgrade ceph-osd-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade python3-rgw-debuginfoUpgrade pam_oath-debuginfoUpgrade librbd-develUpgrade ceph-radosgw | Aug 11, 2022 | Jul 25, 2022 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 25, 2022 |
| Redhat_linux | — | Upgrade cephadm-ansibleUpgrade nfs-ganesha-debugsourceUpgrade liboath-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-mdsUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-radosgwUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganeshaUpgrade python3-rbd-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-test-debuginfoUpgrade rbd-nbdUpgrade ceph-osd-debuginfoUpgrade python3-rgw-debuginfoUpgrade libunwind-debugsourceUpgrade nfs-ganesha-debuginfoUpgrade ceph-immutable-object-cacheNo solution existsUpgrade libradospp-develUpgrade leveldbUpgrade cephfs-mirror-debuginfoUpgrade nfs-ganesha-proxyUpgrade oath-toolkit-debugsourceUpgrade librbd-develUpgrade ceph-common-debuginfoUpgrade libpskc-debuginfoUpgrade cephadmUpgrade ceph-ansibleUpgrade libradosstriper1-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade cephfs-topUpgrade liboathUpgrade ceph-resource-agentsUpgrade ceph-mibUpgrade python3-rbdUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade leveldb-debugsourceUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mon-debuginfoUpgrade pskctool-debuginfoUpgrade oath-toolkit-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirrorUpgrade librgw2Upgrade librgw-develUpgrade nfs-ganesha-selinuxUpgrade ceph-grafana-dashboardsUpgrade ceph-debugsourceUpgrade ceph-immutable-object-cache-debuginfoUpgrade gperftools-libs-debuginfoUpgrade oathtool-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-rgw-debuginfoUpgrade libcephfs-develUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libcephfs2Upgrade pam_oath-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-ceph-commonUpgrade python3-rgwUpgrade gperftools-debugsourceUpgrade cephfs-mirrorUpgrade rbd-mirror-debuginfoUpgrade ceph-baseUpgrade librados-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-radosUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-rados-debuginfoUpgrade libcephfs2-debuginfoUpgrade libunwindUpgrade gperftools-libsUpgrade librados-devel-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade leveldb-debuginfoUpgrade libunwind-debuginfoUpgrade rbd-nbd-debuginfo | Aug 11, 2022 | Jul 25, 2022 |
| Suse | — | Upgrade librbd-develUpgrade cephadmUpgrade librgw-develUpgrade librados2Upgrade cephfs-mirrorUpgrade libcephsqlite-develUpgrade rbd-fuseUpgrade python3-radosUpgrade librgw2Upgrade python3-ceph-commonUpgrade libcephfs-develUpgrade ceph-mdsUpgrade ceph-fuseUpgrade python3-rgwUpgrade rados-objclass-develUpgrade ceph-mgr-rookUpgrade ceph-commonUpgrade ceph-immutable-object-cacheUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-k8seventsUpgrade ceph-monUpgrade ceph-radosgwUpgrade librbd1Upgrade libcephfs2Upgrade python3-cephfsUpgrade cephfs-topUpgrade ceph-testUpgrade ceph-osdUpgrade libradospp-develUpgrade ceph-mgr-cephadmUpgrade ceph-mgrUpgrade libcephsqliteUpgrade ceph-mgr-diskprediction-localUpgrade rbd-mirrorUpgrade ceph-baseUpgrade ceph-mgr-modules-coreUpgrade cephfs-shellUpgrade cephUpgrade python3-rbdUpgrade rbd-nbdUpgrade ceph-prometheus-alertsUpgrade python3-ceph-argparse | Mar 28, 2023 | Jul 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Jul 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub