Red Hat Security Advisory

RHSA-2024:3925

Red Hat Ceph Storage 7.1 security, enhancements, and bug fix update

Released 2024-06-14 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-194.el8cp, ceph-2:18.2.1-194.el9cp, ceph-base-2:18.2.1-194.el8cp +47

TI-2023-02931 CVE-2023-3128 · GHSA-mpv3-g8m3-3fjc

HIGH 82

Grafana is validating Azure AD accounts based on the email claim.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03995 Published 2023-06-22 Partial fix · 9.5.4, 9.4.13 +3 CWE-290

TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88

MEDIUM 52

A path traversal vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2024-01-12 Partial fix · 5.11.0 CWE-22

TI-2023-04439 CVE-2023-4822 · GHSA-fw9c-75hh-89p6

LOW 36

Grafana is an open-source platform for monitoring and observability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01264 Published 2023-10-16 Fixed in 9.4.16, 9.5.11 +2 CWE-269

TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r

LOW 34

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2024-01-12 Partial fix · 5.11.0 CWE-20