The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganeshaUpgrade librados-develUpgrade librbd-develUpgrade libntirpc-debuginfoUpgrade python-rgwUpgrade ceph-radosgwUpgrade libntirpcUpgrade nfs-ganesha-cephUpgrade ceph-fuseUpgrade ceph-baseUpgrade nfs-ganesha-rgwUpgrade python2-cryptoUpgrade librgw-develUpgrade ceph-selinuxUpgrade nfs-ganesha-debuginfoUpgrade cephmetrics-ansibleUpgrade librgw2Upgrade ceph-mdsUpgrade ceph-ansibleUpgrade python-crypto-debuginfoUpgrade libcephfs2Upgrade ceph-commonUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade ceph-iscsi-configUpgrade libcephfs-develUpgrade python-cephfs | Mar 5, 2020 | Jan 28, 2019 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 28, 2019 |
| Redhat_linux | — | Upgrade librgw-develUpgrade python2-cryptoUpgrade ceph-debuginfoUpgrade libntirpcUpgrade ceph-commonUpgrade nfs-ganesha-debuginfoUpgrade python-cephfsUpgrade ceph-baseUpgrade libcephfs2Upgrade librados-develUpgrade rbd-mirrorUpgrade libcephfs-develUpgrade ceph-iscsi-configUpgrade python-rgwUpgrade cephmetrics-ansibleUpgrade ceph-fuseUpgrade nfs-ganesha-rgwUpgrade ceph-ansibleUpgrade nfs-ganeshaUpgrade python-crypto-debuginfoUpgrade ceph-selinuxUpgrade ceph-radosgwUpgrade librbd-develUpgrade librgw2Upgrade libradosstriper1Upgrade libntirpc-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-mds | Mar 5, 2020 | Jan 28, 2019 |
| Suse | — | Upgrade python3-ceph-argparseUpgrade librbd1Upgrade librbd-develUpgrade libcephfs-develUpgrade librados-develUpgrade python-rbdUpgrade python3-cephfsUpgrade ceph-commonUpgrade rbd-nbdUpgrade librados2Upgrade librgw2Upgrade libcephfs2Upgrade python3-radosUpgrade librgw-develUpgrade python3-ceph-commonUpgrade python-cephfsUpgrade python3-rgwUpgrade python3-rbdUpgrade libradospp-develUpgrade python-radosUpgrade rados-objclass-develUpgrade python-rgwUpgrade libradosstriper1 | Feb 27, 2019 | Jan 28, 2019 |
| Ubuntu | — | Upgrade cephUpgrade ceph-common | Jun 25, 2019 | Jan 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub