A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jul 25, 2022 |
| Centos_linux | — | Upgrade rbd-nbd-debuginfoUpgrade ceph-base-debuginfoUpgrade libcephfs2Upgrade libcephsqlite-debuginfoUpgrade libunwind-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-selinuxUpgrade python3-rgwUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-baseUpgrade librados-develUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-rgwUpgrade libpskc-debuginfoUpgrade cephadm-ansibleUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade python3-rbdUpgrade libradospp-develUpgrade librgw2-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libcephfs-develUpgrade python3-ceph-argparseUpgrade gperftools-debugsourceUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade leveldb-debuginfoUpgrade cephfs-mirrorUpgrade nfs-ganesha-rgw-debuginfoUpgrade gperftools-libsUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade oath-toolkit-debugsourceUpgrade cephfs-topUpgrade python3-ceph-commonUpgrade ceph-fuseUpgrade oath-toolkit-debuginfoUpgrade nfs-ganesha-cephUpgrade librgw2Upgrade libradosstriper1Upgrade libunwindUpgrade gperftools-libs-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade python3-rgw-debuginfoUpgrade pam_oath-debuginfoUpgrade ceph-radosgwUpgrade librbd-develUpgrade liboath-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleUpgrade python3-radosUpgrade leveldbUpgrade ceph-test-debuginfoUpgrade libunwind-debugsourceUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-selinuxUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade ceph-mibUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-common-debuginfoUpgrade cephadmUpgrade ceph-fuse-debuginfoUpgrade leveldb-debugsourceUpgrade nfs-ganeshaUpgrade liboathUpgrade pskctool-debuginfoUpgrade ceph-mdsUpgrade ceph-resource-agentsUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-proxyUpgrade oathtool-debuginfoUpgrade rbd-nbd | Aug 11, 2022 | Jul 25, 2022 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 25, 2022 |
| Redhat_linux | — | Upgrade python3-radosUpgrade librgw-develUpgrade nfs-ganesha-selinuxUpgrade python3-ceph-commonUpgrade ceph-debugsourceUpgrade libcephfs2-debuginfoUpgrade librados-develUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-grafana-dashboardsUpgrade cephfs-mirrorUpgrade oathtool-debuginfoUpgrade python3-rgwUpgrade gperftools-debugsourceUpgrade ceph-immutable-object-cache-debuginfoUpgrade pam_oath-debuginfoUpgrade python3-cephfsUpgrade libcephfs2Upgrade librados-devel-debuginfoUpgrade ceph-baseUpgrade ceph-radosgw-debuginfoUpgrade gperftools-libsUpgrade python3-rados-debuginfoUpgrade python3-ceph-argparseUpgrade gperftools-libs-debuginfoUpgrade libunwindUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs-develUpgrade ceph-commonUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade leveldb-debuginfoUpgrade libunwind-debuginfoUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade liboath-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-osd-debuginfoUpgrade oath-toolkit-debugsourceUpgrade python3-rbdUpgrade cephfs-topUpgrade ceph-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleNo solution existsUpgrade libradosstriper1-debuginfoUpgrade leveldb-debugsourceUpgrade ceph-mibUpgrade nfs-ganesha-rados-urlsUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade rbd-nbdUpgrade ceph-resource-agentsUpgrade nfs-ganesha-proxyUpgrade liboathUpgrade nfs-ganesha-rados-graceUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade librbd-develUpgrade leveldbUpgrade cephadmUpgrade librgw2Upgrade libunwind-debugsourceUpgrade ceph-common-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-debuginfoUpgrade ceph-mon-debuginfoUpgrade librgw2-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mgr-debuginfoUpgrade oath-toolkit-debuginfoUpgrade libradospp-develUpgrade ceph-base-debuginfoUpgrade python3-rbd-debuginfoUpgrade pskctool-debuginfoUpgrade ceph-mdsUpgrade libcephsqlite-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-vfsUpgrade libpskc-debuginfoUpgrade cephadm-ansibleUpgrade cephfs-mirror-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-test-debuginfo | Aug 11, 2022 | Jul 25, 2022 |
| Suse | — | Upgrade python3-rgwUpgrade rados-objclass-develUpgrade cephfs-topUpgrade ceph-mdsUpgrade ceph-immutable-object-cacheUpgrade python3-radosUpgrade ceph-commonUpgrade cephfs-mirrorUpgrade python3-ceph-commonUpgrade ceph-mgr-k8seventsUpgrade libcephfs-develUpgrade python3-cephfsUpgrade librados-develUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-rookUpgrade librgw-develUpgrade cephadmUpgrade librados2Upgrade libcephsqlite-develUpgrade ceph-grafana-dashboardsUpgrade ceph-radosgwUpgrade ceph-fuseUpgrade librbd-develUpgrade librgw2Upgrade ceph-monUpgrade librbd1Upgrade rbd-fuseUpgrade libcephfs2Upgrade cephfs-shellUpgrade ceph-mgr-modules-coreUpgrade ceph-osdUpgrade cephUpgrade ceph-testUpgrade libradospp-develUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgrUpgrade python3-rbdUpgrade ceph-mgr-cephadmUpgrade python3-ceph-argparseUpgrade libcephsqliteUpgrade ceph-prometheus-alertsUpgrade rbd-mirrorUpgrade rbd-nbdUpgrade ceph-base | Mar 28, 2023 | Jul 25, 2022 |
| Ubuntu | — | Upgrade cephUpgrade ceph-baseUpgrade ceph-common | May 10, 2023 | Jul 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub