Red Hat Security Advisory

RHSA-2022:1716

Red Hat Ceph Storage 4.3 Security and Bug Fix update

Released 2022-05-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 4.3 MON ceph-2:14.2.22-110.el7cp, ceph-2:14.2.22-110.el8cp, ceph-base-2:14.2.22-110.el7cp +47
Red Hat Ceph Storage 4.3 OSD ceph-2:14.2.22-110.el7cp, ceph-2:14.2.22-110.el8cp, ceph-base-2:14.2.22-110.el7cp +39
Red Hat Ceph Storage 4.3 Tools ceph-2:14.2.22-110.el7cp, ceph-2:14.2.22-110.el8cp, ceph-base-2:14.2.22-110.el7cp +47

TI-2020-15675 CVE-2020-25658 · GHSA-xrx6-fmxq-rjj2

LOW 36

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01651 Published 2020-11-12 Partial fix · 4.7 CWE-385

TI-2021-02483 CVE-2021-3524 · GHSA-3rmw-wm6w-rmcr

LOW 32

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01604 Published 2021-05-17 Partial fix CWE-20

TI-2021-02876 CVE-2021-3979 · GHSA-23g5-cwwr-8xhw

LOW 30

A key length flaw was found in Red Hat Ceph Storage.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00597 Published 2022-08-25 Partial fix CWE-327