A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-ansibleUpgrade ceph-radosgwUpgrade python-rgwUpgrade ceph-fuseUpgrade libradosstriper1Upgrade cephmetrics-collectorsUpgrade ceph-selinuxUpgrade cephmetrics-ansibleUpgrade cephmetricsUpgrade librbd-develUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-mdsUpgrade librgw2Upgrade librados-develUpgrade libcephfs1Upgrade nfs-ganesha-cephUpgrade rbd-mirrorUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade cephmetrics-grafana-pluginsUpgrade python-cephfsUpgrade librgw2-develUpgrade librgw-develUpgrade ceph-baseUpgrade libcephfs1-develUpgrade nfs-ganesha-debuginfoUpgrade ceph-debuginfoUpgrade nfs-ganesha-rgw | Aug 28, 2019 | Jul 10, 2018 |
| Debian | — | Upgrade ceph | Nov 14, 2018 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade rbd-mirrorUpgrade python-cephfsUpgrade ceph-baseUpgrade libcephfs1-develUpgrade ceph-debuginfoUpgrade libcephfs2Upgrade ceph-commonUpgrade libcephfs-develUpgrade ceph-fuseUpgrade librgw2-develUpgrade libcephfs1Upgrade cephmetrics-collectorsUpgrade nfs-ganesha-debuginfoUpgrade cephmetricsUpgrade librgw-develUpgrade librados-develUpgrade ceph-selinuxUpgrade nfs-ganesha-cephUpgrade ceph-mdsUpgrade nfs-ganeshaUpgrade librgw2Upgrade ceph-ansibleUpgrade cephmetrics-grafana-pluginsUpgrade cephmetrics-ansibleUpgrade ceph-radosgwUpgrade librbd-develUpgrade python-rgwUpgrade nfs-ganesha-rgwUpgrade libradosstriper1 | Jul 27, 2018 | Jul 10, 2018 |
| Suse | — | Upgrade librbd-develUpgrade python-rgwUpgrade ceph-mdsUpgrade python3-cephfsUpgrade librados2Upgrade libradosstriper1Upgrade libradospp-develUpgrade cephUpgrade python3-rgwUpgrade python3-rbdUpgrade ceph-radosgwUpgrade ceph-osdUpgrade python-radosUpgrade rbd-fuseUpgrade librgw2Upgrade ceph-testUpgrade rados-objclass-develUpgrade ceph-resource-agentsUpgrade ceph-fuseUpgrade python3-ceph-argparseUpgrade ceph-baseUpgrade ceph-mgrUpgrade ceph-commonUpgrade libcephfs-develUpgrade python3-ceph-commonUpgrade rbd-mirrorUpgrade librgw-develUpgrade librados-develUpgrade libcephfs2Upgrade ceph-monUpgrade rbd-nbdUpgrade libradosstriper-develUpgrade python-rbdUpgrade python-cephfsUpgrade librbd1Upgrade python3-rados | Aug 4, 2018 | Jul 10, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub