Lucene search

K
redhatRedHatRHSA-2016:2815
HistoryNov 22, 2016 - 4:43 p.m.

(RHSA-2016:2815) Moderate: Red Hat Ceph Storage security, bug fix, and enhancement update

2016-11-2216:43:08
access.redhat.com
25

0.002 Low

EPSS

Percentile

60.2%

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

The following packages have been upgraded to a newer upstream version: ceph (10.2.3), ceph-deploy (1.5.36), calamari-server (1.4.9), nfs-ganesha (2.4.0), ceph-iscsi-config (1.5), libntirpc (1.4.1), ceph-iscsi-tools (1.1). (BZ#1340004, BZ#1349999)

Security Fix(es):

  • A flaw was found in the way Ceph Object Gateway handles POST object requests. An authenticated attacker could launch a denial of service attack by sending null or specially crafted POST object requests. (CVE-2016-8626)

Bug Fix(es) and Enhancement(s):

For detailed information on changes in this release, see the Red Hat Ceph
Storage 2.1 Release Notes available at:

https://access.redhat.com/documentation/en/red-hat-ceph-storage/2.1/single/release-notes/

All users of Red Hat Ceph Storage are advised to upgrade to these updated
packages.