Lucene search
RedHatRHSA-2016:1972HistorySep 29, 2016 - 12:35 p.m.
(RHSA-2016:1972) Moderate: Red Hat Ceph Storage 1.3.3 security, bug fix, and enhancement update
2016-09-2912:35:33
access.redhat.com
37
0.006 Low
EPSS
Percentile
78.8%
Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.
Security Fix(es):
- A flaw was found in Ceph RGW code which allows an anonymous user to list contents of RGW bucket by bypassing ACL which should only allow authenticated users to list contents of bucket. (CVE-2016-7031)
For detailed information on changes in this release, see the Red Hat Ceph Storage 1.3.3 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | ceph-selinux | < 0.94.9-3.el7cp | ceph-selinux-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librbd1-devel | < 0.94.9-3.el7cp | librbd1-devel-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-debuginfo | < 0.94.9-3.el7cp | ceph-debuginfo-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-common | < 0.94.9-3.el7cp | ceph-common-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | python-rbd | < 0.94.9-3.el7cp | python-rbd-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-radosgw | < 0.94.9-3.el7cp | ceph-radosgw-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-osd | < 0.94.9-3.el7cp | ceph-osd-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | python-rados | < 0.94.9-3.el7cp | python-rados-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librbd1 | < 0.94.9-3.el7cp | librbd1-0.94.9-3.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-test | < 0.94.9-3.el7cp | ceph-test-0.94.9-3.el7cp.x86_64.rpm |
Related
prion
prion
Code injection
2016-10-03 18:59:00
redhat
redhat
cvelist
cvelist
CVE-2016-7031
2016-10-03 18:00:00
cve
cve
CVE-2016-7031
2016-10-03 18:59:12
nessus
nessus
RHEL 7 : Red Hat Ceph Storage 1.3.3 (RHSA-2016:1972)
2018-08-29 00:00:00
Ubuntu 14.04 LTS : Ceph vulnerabilities (USN-3452-1)
2017-10-12 00:00:00
ubuntucve
ubuntucve
CVE-2016-7031
2016-10-03 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:13:22
nvd
nvd
CVE-2016-7031
2016-10-03 18:59:12
debiancve
debiancve
CVE-2016-7031
2016-10-03 18:59:12
openvas
openvas
Ubuntu: Security Advisory (USN-3452-1)
2017-10-12 00:00:00
ubuntu
ubuntu
Ceph vulnerabilities
2017-10-11 00:00:00