Lucene search
Gentoo FoundationMGASA-2022-0138HistoryApr 13, 2022 - 7:06 p.m.
Updated ceph packages fix security vulnerability
2022-04-1319:06:19
Gentoo Foundation
advisories.mageia.org
24
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
50.8%
Updated ceph packages fix security vulnerabilities: the key length for encrypted devices created using ceph-volume is incorrect. This is due to a bug in ceph_volume/util/encryption.py which is fixed by this new version. (CVE-2021-3979)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | ceph | < 15.2.16-1 | ceph-15.2.16-1.mga8 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0138)
2022-04-14 00:00:00
openSUSE: Security Advisory for ceph (SUSE-SU-2022:2818-1)
2022-08-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4501-1)
2022-12-16 00:00:00
suse
suse
Security update for ceph (important)
2022-08-16 00:00:00
ubuntucve
ubuntucve
CVE-2021-3979
2022-08-25 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : ceph (EulerOS-SA-2023-1308)
2023-02-08 00:00:00
SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2022:4501-1)
2022-12-17 00:00:00
SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2022:2818-1)
2022-08-17 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: ceph-17.2.5-1.fc37
2022-11-10 22:50:11
redhatcve
redhatcve
CVE-2021-3979
2022-01-12 23:22:09
nvd
nvd
CVE-2021-3979
2022-08-25 20:15:09
cve
cve
CVE-2021-3979
2022-08-25 20:15:09
veracode
veracode
Access Control Bypass
2022-04-23 00:42:48
prion
prion
Design/Logic Flaw
2022-08-25 20:15:00
osv
osv
CVE-2021-3979
2022-08-25 20:15:09
ceph vulnerabilities
2023-05-09 21:51:19
ceph - security update
2023-10-23 00:00:00
debiancve
debiancve
CVE-2021-3979
2022-08-25 20:15:09
cvelist
cvelist
CVE-2021-3979
2022-08-25 00:00:00
redhat
redhat
ubuntu
ubuntu
Ceph vulnerabilities
2023-05-09 00:00:00
debian
debian
[SECURITY] [DLA 3629-1] ceph security update
2023-10-23 16:59:44
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
50.8%
Related for MGASA-2022-0138