RHSA-2021:0081HighCVSS 8.8

Red Hat Security Advisory: Red Hat Ceph Storage 4.2 Security and Bug Fix update

Published
January 12, 2021
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2020-25660 →CVE-2020-25677 →CVE-2020-27781 →

📋 Description

CVE-2020-25660 — ceph: CEPHX_V2 replay attack protection lost CVE-2020-25677 — ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file CVE-2020-27781 — ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila

🎯 Affected products200

  • Red Hat Ceph Storage 4.2 MON
  • Red Hat Ceph Storage 4.2 OSD
  • Red Hat Ceph Storage 4.2 Tools
  • ansible-runner-service-0:0.9-5.el8cp.noarch as a component of Red Hat Ceph Storage 4.2 Tools
  • ansible-runner-service-0:0.9-5.el8cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-2:14.2.11-95.el7cp.src as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-2:14.2.11-95.el7cp.src as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-2:14.2.11-95.el7cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-2:14.2.11-95.el8cp.src as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-2:14.2.11-95.el8cp.src as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-2:14.2.11-95.el8cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.41-1.el7cp.noarch as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.41-1.el7cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.41-1.el8cp.noarch as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.41-1.el8cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-95.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-95.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-95.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-95.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-95.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-95.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-95.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-95.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-95.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-95.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-95.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-95.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-95.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-95.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-95.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 Tools
  • +170 more not shown

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (118)