Red Hat Security AdvisoryRHSA-2015:2066
Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update
Released 2015-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage Calamari 1.3 calamari-server-1.3-11.el7cp
- Red Hat Ceph Storage Installer 1.3 ceph-deploy-1.5.27.3-1.el7cp, ceph-puppet-modules-0.1.1-1.el7cp, facter-1:1.7.6-2.1.el7sat +47
- Red Hat Ceph Storage MON 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
- Red Hat Ceph Storage OSD 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
- Red Hat Ceph Storage Tools 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
Fixes 1 record
Priority LOW 24
CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01907 · Published 2015-12-03 · Partial fix
