The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librgw-develUpgrade ceph-iscsi-configUpgrade nfs-ganesha-rgwUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade python2-cryptoUpgrade librgw2Upgrade libcephfs-develUpgrade libcephfs2Upgrade python-crypto-debuginfoUpgrade ceph-ansibleUpgrade ceph-selinuxUpgrade ceph-commonUpgrade ceph-mdsUpgrade python-cephfsUpgrade libradosstriper1Upgrade cephmetrics-ansibleUpgrade nfs-ganesha-debuginfoUpgrade librbd-develUpgrade ceph-baseUpgrade ceph-fuseUpgrade nfs-ganesha-cephUpgrade libntirpc-debuginfoUpgrade python-rgwUpgrade ceph-radosgwUpgrade libntirpcUpgrade librados-develUpgrade nfs-ganesha | Mar 5, 2020 | Jan 28, 2019 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 28, 2019 |
| Redhat_linux | — | Upgrade librgw-develUpgrade nfs-ganesha-debuginfoUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade librados-develUpgrade libcephfs-develUpgrade libcephfs2Upgrade rbd-mirrorUpgrade python2-cryptoUpgrade ceph-commonUpgrade libntirpcUpgrade librgw2Upgrade ceph-ansibleUpgrade libradosstriper1Upgrade ceph-fuseUpgrade python-rgwUpgrade librbd-develUpgrade ceph-radosgwUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-cephUpgrade python-crypto-debuginfoUpgrade ceph-mdsUpgrade ceph-selinuxUpgrade nfs-ganeshaUpgrade libntirpc-debuginfoUpgrade cephmetrics-ansibleUpgrade ceph-iscsi-config | Mar 5, 2020 | Jan 28, 2019 |
| Suse | — | Upgrade librados-develUpgrade ceph-commonUpgrade python3-ceph-argparseUpgrade librgw2Upgrade librados2Upgrade python3-radosUpgrade librgw-develUpgrade libcephfs-develUpgrade libcephfs2Upgrade librbd1Upgrade python3-ceph-commonUpgrade python-rbdUpgrade python3-cephfsUpgrade librbd-develUpgrade rbd-nbdUpgrade python-cephfsUpgrade python-radosUpgrade python3-rbdUpgrade python3-rgwUpgrade libradosstriper1Upgrade libradospp-develUpgrade python-rgwUpgrade rados-objclass-devel | Feb 27, 2019 | Jan 28, 2019 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph | Jun 25, 2019 | Jan 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub