Sigurnosni nedostaci programskog paketa Red Hat Ceph Storage

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Important: Red Hat Ceph Storage 4.2 Security and Bug Fix update
Advisory ID: RHSA-2021:0081-01
Product: Red Hat Ceph Storage
Advisory URL: https://access.redhat.com/errata/RHSA-2021:0081
Issue date: 2021-01-12
CVE Names: CVE-2020-25660 CVE-2020-25677 CVE-2020-27781
=====================================================================

1. Summary:

An update is now available for Red Hat Ceph Storage 4.2.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Ceph Storage 4.2 MON – noarch, ppc64le, s390x, x86_64
Red Hat Ceph Storage 4.2 OSD – ppc64le, s390x, x86_64
Red Hat Ceph Storage 4.2 Tools – noarch, ppc64le, s390x, x86_64

3. Description:

Red Hat Ceph Storage is a scalable, open, software-defined storage platform
that combines the most stable version of the Ceph storage system with a
Ceph management platform, deployment utilities, and support services.

The ceph-ansible package provides Ansible playbooks for installing,
maintaining, and upgrading Red Hat Ceph Storage.

This package contains a new implementation of the original libtirpc,
transport-independent RPC (TI-RPC) library for NFS-Ganesha.

NFS-GANESHA is a NFS Server running in user space. It comes with various
back-end modules (called FSALs) provided as shared objects to support
different file systems and name-spaces.

Security Fix(es):

* ceph: User credentials can be manipulated and stolen by Native CephFS
consumers of OpenStack Manila (CVE-2020-27781)

* ceph: CEPHX_V2 replay attack protection lost (CVE-2020-25660)

* ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf
configuration file (CVE-2020-25677)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

These updated packages include numerous bug fixes. Space precludes
documenting all of these changes in this advisory. Users are directed to
the Red Hat Ceph Storage 4.2 Release Notes for information on the most
significant of these changes:

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4.2/html
/release_notes/

All users of Red Hat Ceph Storage are advised to upgrade to these updated
packages, which provide numerous bug fixes.

4. Solution:

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1582280 – RFE: Standard log collection via ceph-ansible
1731158 – [RFE] multisite playbook to verify connectivity amongst two sites
1763021 – Gettting warning messages while executing rbd CLI commands
1774428 – Live image migration command “Abort” is not working as expected
1774605 – Ceph 4 building outdated 8 years old version of python-repoze-lru
1786106 – [iscsi]:avc denial on rbd-target-api from ioctl access
1791911 – Validate host can proceed in NOTOK if Cluster Type was originally Development/POC
1800382 – Support 2-site Stretch Clusters in RADOS
1826690 – [Ceph-dashboard] Pool: Performance Details showing wrong capacity usage
1828246 – [GSS]Ceph installation via Cockpit fails with “Systemd must be present”
1829214 – ansible-runner-service does not remove hosts from previous runs
1830375 – cpu stats incorrectly displayed
1831299 – cephfs/Filesystem component fails when clicked on “clients” tab
1831682 – [ansible-runner-service] : auto generated ssh_key permission hindering users to use ceph-ansible for day-2 operations
1836431 – Support Deployment with Autoscaler on existing cluster
1841436 – [RFE] Need support for including rgw interface without enabling multi-site option in multi-site cluster.
1845501 – ls command hangs on nfs ganesha mountpoint with ERROR in ganesha log: FSAL :CRIT :Invoking unsupported FSAL operation
1847166 – [RFE] Ceph ansible doesn’t update crush map based on device classes
1850947 – enabling RBD stats collection breaks ceph metrics endpoint
1855148 – [Ceph-installer]: Set higher override values for rgw
1855439 – [RFE] support crush rule during rgw replicated pool creation
1855448 – [CodeChange]mgr: Improve internal python to c++ interface
1856916 – mgr: make progress module more efficient
1856960 – [Tool] Update the ceph-bluestore-tool for adding rescue procedure for bluefs log replay
1856981 – 9GB of RAM are wasted for TASK [ceph-facts : set_fact ceph_current_status (convert to json)]
1857414 – [RFE] msgr v2.1 changes
1859180 – nfs-ganesha: rebase to 3.x
1859679 – rebase ceph to 14.2.11
1859872 – During upgrade moving from One RGW per node to Two RGW per node fails with ceph-ansible multisite configured
1860057 – [RFE] Global- and pool-level configuration overrides should apply to in-use images
1860073 – [RFE] Add support for snapshot-based mirroring
1860739 – [container] OSD does not stay down after osd_max_markdown_count has been exceeded
1861755 – [RHCS4] delete the unused files after purging cluster
1866257 – [GSS][RADOS]MONs have slow/long running ops
1866308 – [grafana] Some Grafana panels (AVG Disk, …) in Host overview, Host details, OSD details etc. are displaying N/A or no data
1866834 – deployment fails to deploy RGWs: Socket file not found
1867697 – Optimize subtree pin checks in MDS
1867698 – libcephfs client double-ref count decrement
1868638 – [GSS][ceph-dashboard] When we select “This week” for Historical Data in Overall Performance graph, it is not showing any metrics (N/A) in dashboard
1869797 – ‘ceph-volume raw prepare’ fails to prepare because ceph-osd cannot acquire lock on device
1872006 – After restarting an mds, its standy-replay mds remained in the “resolve” state
1872028 – mds should not recover files after normal session close
1872030 – mds decoding of enum types on big-endian systems broken
1872033 – mds parse dirfrag’s ndist is always 0
1872459 – Bucket listing: raise default rgw_bucket_index_max_aio to 128
1872879 – Allow mapping and unmapping rbd images from a container without –net=host
1873221 – Tracking BlueStore changes for RHCS 4.2
1873915 – /var/log/tcmu-runner.log within tcmu-runner container does not get rotated and log grows without limit.
1874756 – RGW: renaming a rgw user not happening on rhcs 4.2
1875628 – mon: only take “in osds” into consideration when trimming osdmaps
1875736 – [RGW][LC]: rgw daemon crash with objects tags
1876692 – site-docker.yml playbook does not manage to login registry.redhat.io from behind a http proxy
1876976 – [RGW][LC] 31 of 1k buckets are not being processed by lc
1877300 – [ceph-volume] : ceph-volume simple scan failing on ceph-volume OSDs
1877413 – ceph: problems with clusters containing nodes on s390x for some specific configurations and workloads
1877737 – [RGW LC]: Lifecycle policy ignores non-current expiration for Prefix/TAG filters in versioned buckets
1877745 – [dashboard][RGW]: Object Gateway > Buckets fails to load data
1877910 – bluestore: follow-on changes for more intelligent DB space usage
1878145 – ceph-mgr alerts module fails to send email: ALERTS_SMTP_ERROR
1878250 – [RGW][NFS-Ganesha]: ls command exits with ‘memory exhausted’ error
1878267 – [ceph-dashboard][RGW-Bucket]: Details section of a bucket with more num_shards exceeds the current pageview
1878268 – librbd QoS throttling might result in an assertion failure
1878271 – [ceph-dashboard]Monitoring – All Alerts: The alerts still seem to be loading
1878500 – [GSS][ceph-volume] OSDs being deployed bluestore mixed type for SSD disks
1879178 – ceph-ansible should bump to ansible 2.9
1879819 – Test LDAP/AD support for RHCS Dashboard
1879836 – Inventory file should be local to the ceph-ansible directory
1880188 – bluestore: fix collection_list ordering
1880252 – [ceph-ansible] docker registry password with special character quotation(‘) fails to log in when running ansible-playbook
1880458 – [Ceph-volume] clone of bug 1877672 : Upgrade fail at [activate scanned ceph-disk osds and migrate to ceph-volume if deploying nautilus]
1880476 – grafana-server group needs to be changed to grafana_server to ensure ansible compatibility with 2.10
1881288 – osd daemon went down and no OSD daemon log in journalctl nor as a file
1881313 – [ceph-ansible] playbook is failing when radosgw_num_instances is set to 2
1881523 – fs to bs : SSDs were not zapped and thus not included in bluestore OSDs when osd_auto_discovery is set to true
1882426 – OSD is crashed with assert – FAILED ceph_assert(cur >= p.length)
1882484 – GC perfcounter fails to update when deletion occurs
1882705 – rbd: make common options override krbd-specific options
1883283 – 99k+ rgw.multimeta entries in bucket stats, cannot list bucket contents
1884023 – list pending GCs is very slow
1885693 – [ceph-mgr] missing dependency for the python-enum34 in the ceph-mgr-14.2.8-111.el7cp.x86_64 on the RHEL7
1886461 – [RFE] Add to the Beast frontend an ‘access log’ line similar to CivetWeb.
1886534 – add-osd playbook failied
1886653 – The list of disallowed_leaders is not listed in mon dump in disallow mode
1886670 – Monitor::_quorum_status() erroneously assumes the first monitor in quorum is the leader
1886677 – Disallowed monitor state is lost on restart (DISALLOW and CONNECTIVITY modes)
1887716 – mds containers failed to start post graceful shutdown of a complete ceph cluster.
1889426 – [security] Set Dashboard in HTTPS by default
1889668 – [RADOS]: Getting ambiguity messages by running enable_stretch_mode
1889712 – [Ceph-dashboard] Update dashboard branding about version to 4.2
1889963 – Buckets creation failed for rhel 8 in 4.2
1890354 – CVE-2020-25660 ceph: CEPHX_V2 replay attack protection lost
1890439 – [ceph-ansible][ceph-containers] can not view the log for containerized ceph daemon using journalctl
1891098 – Configure “ceph health detail” to run periodically and log output to cluster log.
1892108 – CVE-2020-25677 ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file
1892173 – Unable to retrieve the current connection scores via connection scores dump command
1892295 – Global mirror snapshot schedules incorrectly tied to specific MGR instance
1892387 – mon_host configuration with DNS hostname fails to load making cluster inaccessible
1893740 – Improve scaling of snapshot mirror scheduler
1893989 – ceph-ansible sets bad mode on files in /var/lib/ceph/mon/{cluster}-{mon_name}/
1894702 – Unnecessary bilogs are left in sync-disabled buckets
1896587 – Ability to turn off progress module
1897125 – [Ceph-Installer] : Deployment fails due to mismatch in ansible version in ansible-runner container for 4.2
1897995 – [GSS] mgr restful encountering AttributeError while humanifying command
1898486 – ceph-ansible doesn’t recreate /var/lib/ceph/osd/{cluster}-{id} when redeploying an OSD node
1898599 – rgw: append operation will trigger the garbage collection mechanism and remove tails
1898856 – Ceph-Ansible deployment failing with latest builds
1899860 – [RGW][reshard] client.admin daemon crash seen on manual resharding a bucket
1900109 – CVE-2020-27781 Ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila
1901036 – [Ceph-dashboard] Default https based dashboard Ceph metric endpoint broken
1902034 – Module ‘crash’ has failed: dictionary changed size during iteration
1902149 – [Ceph-Ansible] iSCSI Deployment fails for the TASK [ceph-iscsi-gw : systemd start tcmu-runner, rbd-target-api and rbd-target-gw containers]
1902281 – [ceph-ansible] : using add-mon.yml creates new monitor keyring on new monitor and thus doesn’t get added
1903612 – RBD fast-diff regression introduced due to snapshot-based mirroring changes
1904340 – [ceph-dashboard] seen code crash in active mgr as ENGINE Error in HTTPServer.tick
1904958 – [RGW : NFS] Unable to access certain buckets for a particular radosgw user “testuser” on the nfs mount.

6. Package List:

Red Hat Ceph Storage 4.2 MON:

Source:
ceph-14.2.11-95.el7cp.src.rpm
python-repoze-lru-0.7-8.el7cp.src.rpm

noarch:
ceph-grafana-dashboards-14.2.11-95.el7cp.noarch.rpm
ceph-mgr-dashboard-14.2.11-95.el7cp.noarch.rpm
ceph-mgr-diskprediction-local-14.2.11-95.el7cp.noarch.rpm
ceph-mgr-k8sevents-14.2.11-95.el7cp.noarch.rpm
ceph-mgr-rook-14.2.11-95.el7cp.noarch.rpm
python2-repoze-lru-0.7-8.el7cp.noarch.rpm

ppc64le:
ceph-base-14.2.11-95.el7cp.ppc64le.rpm
ceph-common-14.2.11-95.el7cp.ppc64le.rpm
ceph-debuginfo-14.2.11-95.el7cp.ppc64le.rpm
ceph-mgr-14.2.11-95.el7cp.ppc64le.rpm
ceph-mon-14.2.11-95.el7cp.ppc64le.rpm
ceph-selinux-14.2.11-95.el7cp.ppc64le.rpm
ceph-test-14.2.11-95.el7cp.ppc64le.rpm
libcephfs-devel-14.2.11-95.el7cp.ppc64le.rpm
libcephfs2-14.2.11-95.el7cp.ppc64le.rpm
librados-devel-14.2.11-95.el7cp.ppc64le.rpm
librados2-14.2.11-95.el7cp.ppc64le.rpm
libradospp-devel-14.2.11-95.el7cp.ppc64le.rpm
libradosstriper1-14.2.11-95.el7cp.ppc64le.rpm
librbd-devel-14.2.11-95.el7cp.ppc64le.rpm
librbd1-14.2.11-95.el7cp.ppc64le.rpm
librgw-devel-14.2.11-95.el7cp.ppc64le.rpm
librgw2-14.2.11-95.el7cp.ppc64le.rpm
python-ceph-argparse-14.2.11-95.el7cp.ppc64le.rpm
python-cephfs-14.2.11-95.el7cp.ppc64le.rpm
python-rados-14.2.11-95.el7cp.ppc64le.rpm
python-rbd-14.2.11-95.el7cp.ppc64le.rpm
python-rgw-14.2.11-95.el7cp.ppc64le.rpm

x86_64:
ceph-base-14.2.11-95.el7cp.x86_64.rpm
ceph-common-14.2.11-95.el7cp.x86_64.rpm
ceph-debuginfo-14.2.11-95.el7cp.x86_64.rpm
ceph-mgr-14.2.11-95.el7cp.x86_64.rpm
ceph-mon-14.2.11-95.el7cp.x86_64.rpm
ceph-selinux-14.2.11-95.el7cp.x86_64.rpm
ceph-test-14.2.11-95.el7cp.x86_64.rpm
libcephfs-devel-14.2.11-95.el7cp.x86_64.rpm
libcephfs2-14.2.11-95.el7cp.x86_64.rpm
librados-devel-14.2.11-95.el7cp.x86_64.rpm
librados2-14.2.11-95.el7cp.x86_64.rpm
libradospp-devel-14.2.11-95.el7cp.x86_64.rpm
libradosstriper1-14.2.11-95.el7cp.x86_64.rpm
librbd-devel-14.2.11-95.el7cp.x86_64.rpm
librbd1-14.2.11-95.el7cp.x86_64.rpm
librgw-devel-14.2.11-95.el7cp.x86_64.rpm
librgw2-14.2.11-95.el7cp.x86_64.rpm
python-ceph-argparse-14.2.11-95.el7cp.x86_64.rpm
python-cephfs-14.2.11-95.el7cp.x86_64.rpm
python-rados-14.2.11-95.el7cp.x86_64.rpm
python-rbd-14.2.11-95.el7cp.x86_64.rpm
python-rgw-14.2.11-95.el7cp.x86_64.rpm

Red Hat Ceph Storage 4.2 OSD:

Source:
ceph-14.2.11-95.el7cp.src.rpm

ppc64le:
ceph-base-14.2.11-95.el7cp.ppc64le.rpm
ceph-common-14.2.11-95.el7cp.ppc64le.rpm
ceph-debuginfo-14.2.11-95.el7cp.ppc64le.rpm
ceph-osd-14.2.11-95.el7cp.ppc64le.rpm
ceph-selinux-14.2.11-95.el7cp.ppc64le.rpm
ceph-test-14.2.11-95.el7cp.ppc64le.rpm
libcephfs-devel-14.2.11-95.el7cp.ppc64le.rpm
libcephfs2-14.2.11-95.el7cp.ppc64le.rpm
librados-devel-14.2.11-95.el7cp.ppc64le.rpm
librados2-14.2.11-95.el7cp.ppc64le.rpm
libradospp-devel-14.2.11-95.el7cp.ppc64le.rpm
libradosstriper1-14.2.11-95.el7cp.ppc64le.rpm
librbd-devel-14.2.11-95.el7cp.ppc64le.rpm
librbd1-14.2.11-95.el7cp.ppc64le.rpm
librgw-devel-14.2.11-95.el7cp.ppc64le.rpm
librgw2-14.2.11-95.el7cp.ppc64le.rpm
python-ceph-argparse-14.2.11-95.el7cp.ppc64le.rpm
python-cephfs-14.2.11-95.el7cp.ppc64le.rpm
python-rados-14.2.11-95.el7cp.ppc64le.rpm
python-rbd-14.2.11-95.el7cp.ppc64le.rpm
python-rgw-14.2.11-95.el7cp.ppc64le.rpm

x86_64:
ceph-base-14.2.11-95.el7cp.x86_64.rpm
ceph-common-14.2.11-95.el7cp.x86_64.rpm
ceph-debuginfo-14.2.11-95.el7cp.x86_64.rpm
ceph-osd-14.2.11-95.el7cp.x86_64.rpm
ceph-selinux-14.2.11-95.el7cp.x86_64.rpm
ceph-test-14.2.11-95.el7cp.x86_64.rpm
libcephfs-devel-14.2.11-95.el7cp.x86_64.rpm
libcephfs2-14.2.11-95.el7cp.x86_64.rpm
librados-devel-14.2.11-95.el7cp.x86_64.rpm
librados2-14.2.11-95.el7cp.x86_64.rpm
libradospp-devel-14.2.11-95.el7cp.x86_64.rpm
libradosstriper1-14.2.11-95.el7cp.x86_64.rpm
librbd-devel-14.2.11-95.el7cp.x86_64.rpm
librbd1-14.2.11-95.el7cp.x86_64.rpm
librgw-devel-14.2.11-95.el7cp.x86_64.rpm
librgw2-14.2.11-95.el7cp.x86_64.rpm
python-ceph-argparse-14.2.11-95.el7cp.x86_64.rpm
python-cephfs-14.2.11-95.el7cp.x86_64.rpm
python-rados-14.2.11-95.el7cp.x86_64.rpm
python-rbd-14.2.11-95.el7cp.x86_64.rpm
python-rgw-14.2.11-95.el7cp.x86_64.rpm

Red Hat Ceph Storage 4.2 Tools:

Source:
ceph-14.2.11-95.el7cp.src.rpm
ceph-ansible-4.0.41-1.el7cp.src.rpm
cockpit-ceph-installer-1.4-0.el7cp.src.rpm
libntirpc-3.3-0.1.el7cp.src.rpm
nfs-ganesha-3.3-0.4.el7cp.src.rpm

noarch:
ceph-ansible-4.0.41-1.el7cp.noarch.rpm
ceph-grafana-dashboards-14.2.11-95.el7cp.noarch.rpm
cockpit-ceph-installer-1.4-0.el7cp.noarch.rpm
nfs-ganesha-selinux-3.3-0.4.el7cp.noarch.rpm

ppc64le:
ceph-base-14.2.11-95.el7cp.ppc64le.rpm
ceph-common-14.2.11-95.el7cp.ppc64le.rpm
ceph-debuginfo-14.2.11-95.el7cp.ppc64le.rpm
ceph-fuse-14.2.11-95.el7cp.ppc64le.rpm
ceph-mds-14.2.11-95.el7cp.ppc64le.rpm
ceph-radosgw-14.2.11-95.el7cp.ppc64le.rpm
ceph-selinux-14.2.11-95.el7cp.ppc64le.rpm
libcephfs-devel-14.2.11-95.el7cp.ppc64le.rpm
libcephfs2-14.2.11-95.el7cp.ppc64le.rpm
libntirpc-3.3-0.1.el7cp.ppc64le.rpm
libntirpc-debuginfo-3.3-0.1.el7cp.ppc64le.rpm
librados-devel-14.2.11-95.el7cp.ppc64le.rpm
librados2-14.2.11-95.el7cp.ppc64le.rpm
libradospp-devel-14.2.11-95.el7cp.ppc64le.rpm
libradosstriper1-14.2.11-95.el7cp.ppc64le.rpm
librbd-devel-14.2.11-95.el7cp.ppc64le.rpm
librbd1-14.2.11-95.el7cp.ppc64le.rpm
librgw-devel-14.2.11-95.el7cp.ppc64le.rpm
librgw2-14.2.11-95.el7cp.ppc64le.rpm
nfs-ganesha-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-ceph-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-debuginfo-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-proxy-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-rados-grace-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-rados-urls-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-rgw-3.3-0.4.el7cp.ppc64le.rpm
nfs-ganesha-vfs-3.3-0.4.el7cp.ppc64le.rpm
python-ceph-argparse-14.2.11-95.el7cp.ppc64le.rpm
python-cephfs-14.2.11-95.el7cp.ppc64le.rpm
python-rados-14.2.11-95.el7cp.ppc64le.rpm
python-rbd-14.2.11-95.el7cp.ppc64le.rpm
python-rgw-14.2.11-95.el7cp.ppc64le.rpm
rbd-mirror-14.2.11-95.el7cp.ppc64le.rpm
rbd-nbd-14.2.11-95.el7cp.ppc64le.rpm

x86_64:
ceph-base-14.2.11-95.el7cp.x86_64.rpm
ceph-common-14.2.11-95.el7cp.x86_64.rpm
ceph-debuginfo-14.2.11-95.el7cp.x86_64.rpm
ceph-fuse-14.2.11-95.el7cp.x86_64.rpm
ceph-mds-14.2.11-95.el7cp.x86_64.rpm
ceph-radosgw-14.2.11-95.el7cp.x86_64.rpm
ceph-selinux-14.2.11-95.el7cp.x86_64.rpm
libcephfs-devel-14.2.11-95.el7cp.x86_64.rpm
libcephfs2-14.2.11-95.el7cp.x86_64.rpm
libntirpc-3.3-0.1.el7cp.x86_64.rpm
libntirpc-debuginfo-3.3-0.1.el7cp.x86_64.rpm
librados-devel-14.2.11-95.el7cp.x86_64.rpm
librados2-14.2.11-95.el7cp.x86_64.rpm
libradospp-devel-14.2.11-95.el7cp.x86_64.rpm
libradosstriper1-14.2.11-95.el7cp.x86_64.rpm
librbd-devel-14.2.11-95.el7cp.x86_64.rpm
librbd1-14.2.11-95.el7cp.x86_64.rpm
librgw-devel-14.2.11-95.el7cp.x86_64.rpm
librgw2-14.2.11-95.el7cp.x86_64.rpm
nfs-ganesha-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-ceph-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-debuginfo-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-proxy-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-rados-grace-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-rados-urls-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-rgw-3.3-0.4.el7cp.x86_64.rpm
nfs-ganesha-vfs-3.3-0.4.el7cp.x86_64.rpm
python-ceph-argparse-14.2.11-95.el7cp.x86_64.rpm
python-cephfs-14.2.11-95.el7cp.x86_64.rpm
python-rados-14.2.11-95.el7cp.x86_64.rpm
python-rbd-14.2.11-95.el7cp.x86_64.rpm
python-rgw-14.2.11-95.el7cp.x86_64.rpm
rbd-mirror-14.2.11-95.el7cp.x86_64.rpm
rbd-nbd-14.2.11-95.el7cp.x86_64.rpm

Red Hat Ceph Storage 4.2 MON:

Source:
ceph-14.2.11-95.el8cp.src.rpm
python-repoze-lru-0.7-6.el8ost.src.rpm

noarch:
ceph-grafana-dashboards-14.2.11-95.el8cp.noarch.rpm
ceph-mgr-dashboard-14.2.11-95.el8cp.noarch.rpm
ceph-mgr-diskprediction-local-14.2.11-95.el8cp.noarch.rpm
ceph-mgr-k8sevents-14.2.11-95.el8cp.noarch.rpm
ceph-mgr-rook-14.2.11-95.el8cp.noarch.rpm
python3-repoze-lru-0.7-6.el8ost.noarch.rpm

Red Hat Ceph Storage 4.2 OSD:

Source:
ceph-14.2.11-95.el8cp.src.rpm

Red Hat Ceph Storage 4.2 Tools:

Source:
ansible-runner-service-0.9-5.el8cp.src.rpm
ceph-14.2.11-95.el8cp.src.rpm
ceph-ansible-4.0.41-1.el8cp.src.rpm
cockpit-ceph-installer-1.4-0.el8cp.src.rpm
libntirpc-3.3-0.1.el8cp.src.rpm
nfs-ganesha-3.3-0.4.el8cp.src.rpm

noarch:
ansible-runner-service-0.9-5.el8cp.noarch.rpm
ceph-ansible-4.0.41-1.el8cp.noarch.rpm
ceph-grafana-dashboards-14.2.11-95.el8cp.noarch.rpm
cockpit-ceph-installer-1.4-0.el8cp.noarch.rpm
nfs-ganesha-selinux-3.3-0.4.el8cp.noarch.rpm

ppc64le:
ceph-base-14.2.11-95.el8cp.ppc64le.rpm
ceph-base-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-common-14.2.11-95.el8cp.ppc64le.rpm
ceph-common-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-debugsource-14.2.11-95.el8cp.ppc64le.rpm
ceph-fuse-14.2.11-95.el8cp.ppc64le.rpm
ceph-fuse-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-mds-14.2.11-95.el8cp.ppc64le.rpm
ceph-mds-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-mgr-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-mon-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-osd-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-radosgw-14.2.11-95.el8cp.ppc64le.rpm
ceph-radosgw-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
ceph-selinux-14.2.11-95.el8cp.ppc64le.rpm
ceph-test-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
libcephfs-devel-14.2.11-95.el8cp.ppc64le.rpm
libcephfs2-14.2.11-95.el8cp.ppc64le.rpm
libcephfs2-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
libntirpc-3.3-0.1.el8cp.ppc64le.rpm
libntirpc-debuginfo-3.3-0.1.el8cp.ppc64le.rpm
libntirpc-debugsource-3.3-0.1.el8cp.ppc64le.rpm
librados-devel-14.2.11-95.el8cp.ppc64le.rpm
librados-devel-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
librados2-14.2.11-95.el8cp.ppc64le.rpm
librados2-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
libradospp-devel-14.2.11-95.el8cp.ppc64le.rpm
libradosstriper1-14.2.11-95.el8cp.ppc64le.rpm
libradosstriper1-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
librbd-devel-14.2.11-95.el8cp.ppc64le.rpm
librbd1-14.2.11-95.el8cp.ppc64le.rpm
librbd1-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
librgw-devel-14.2.11-95.el8cp.ppc64le.rpm
librgw2-14.2.11-95.el8cp.ppc64le.rpm
librgw2-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
nfs-ganesha-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-ceph-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-ceph-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-debugsource-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-proxy-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-proxy-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rados-grace-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rados-grace-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rados-urls-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rados-urls-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rgw-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-rgw-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-vfs-3.3-0.4.el8cp.ppc64le.rpm
nfs-ganesha-vfs-debuginfo-3.3-0.4.el8cp.ppc64le.rpm
python3-ceph-argparse-14.2.11-95.el8cp.ppc64le.rpm
python3-cephfs-14.2.11-95.el8cp.ppc64le.rpm
python3-cephfs-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
python3-rados-14.2.11-95.el8cp.ppc64le.rpm
python3-rados-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
python3-rbd-14.2.11-95.el8cp.ppc64le.rpm
python3-rbd-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
python3-rgw-14.2.11-95.el8cp.ppc64le.rpm
python3-rgw-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
rbd-fuse-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
rbd-mirror-14.2.11-95.el8cp.ppc64le.rpm
rbd-mirror-debuginfo-14.2.11-95.el8cp.ppc64le.rpm
rbd-nbd-14.2.11-95.el8cp.ppc64le.rpm
rbd-nbd-debuginfo-14.2.11-95.el8cp.ppc64le.rpm

s390x:
ceph-base-14.2.11-95.el8cp.s390x.rpm
ceph-base-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-common-14.2.11-95.el8cp.s390x.rpm
ceph-common-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-debugsource-14.2.11-95.el8cp.s390x.rpm
ceph-fuse-14.2.11-95.el8cp.s390x.rpm
ceph-fuse-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-mds-14.2.11-95.el8cp.s390x.rpm
ceph-mds-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-mgr-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-mon-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-osd-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-radosgw-14.2.11-95.el8cp.s390x.rpm
ceph-radosgw-debuginfo-14.2.11-95.el8cp.s390x.rpm
ceph-selinux-14.2.11-95.el8cp.s390x.rpm
ceph-test-debuginfo-14.2.11-95.el8cp.s390x.rpm
libcephfs-devel-14.2.11-95.el8cp.s390x.rpm
libcephfs2-14.2.11-95.el8cp.s390x.rpm
libcephfs2-debuginfo-14.2.11-95.el8cp.s390x.rpm
libntirpc-3.3-0.1.el8cp.s390x.rpm
libntirpc-debuginfo-3.3-0.1.el8cp.s390x.rpm
libntirpc-debugsource-3.3-0.1.el8cp.s390x.rpm
librados-devel-14.2.11-95.el8cp.s390x.rpm
librados-devel-debuginfo-14.2.11-95.el8cp.s390x.rpm
librados2-14.2.11-95.el8cp.s390x.rpm
librados2-debuginfo-14.2.11-95.el8cp.s390x.rpm
libradospp-devel-14.2.11-95.el8cp.s390x.rpm
libradosstriper1-14.2.11-95.el8cp.s390x.rpm
libradosstriper1-debuginfo-14.2.11-95.el8cp.s390x.rpm
librbd-devel-14.2.11-95.el8cp.s390x.rpm
librbd1-14.2.11-95.el8cp.s390x.rpm
librbd1-debuginfo-14.2.11-95.el8cp.s390x.rpm
librgw-devel-14.2.11-95.el8cp.s390x.rpm
librgw2-14.2.11-95.el8cp.s390x.rpm
librgw2-debuginfo-14.2.11-95.el8cp.s390x.rpm
nfs-ganesha-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-ceph-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-ceph-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-debugsource-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-proxy-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-proxy-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rados-grace-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rados-grace-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rados-urls-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rados-urls-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rgw-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-rgw-debuginfo-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-vfs-3.3-0.4.el8cp.s390x.rpm
nfs-ganesha-vfs-debuginfo-3.3-0.4.el8cp.s390x.rpm
python3-ceph-argparse-14.2.11-95.el8cp.s390x.rpm
python3-cephfs-14.2.11-95.el8cp.s390x.rpm
python3-cephfs-debuginfo-14.2.11-95.el8cp.s390x.rpm
python3-rados-14.2.11-95.el8cp.s390x.rpm
python3-rados-debuginfo-14.2.11-95.el8cp.s390x.rpm
python3-rbd-14.2.11-95.el8cp.s390x.rpm
python3-rbd-debuginfo-14.2.11-95.el8cp.s390x.rpm
python3-rgw-14.2.11-95.el8cp.s390x.rpm
python3-rgw-debuginfo-14.2.11-95.el8cp.s390x.rpm
rbd-fuse-debuginfo-14.2.11-95.el8cp.s390x.rpm
rbd-mirror-14.2.11-95.el8cp.s390x.rpm
rbd-mirror-debuginfo-14.2.11-95.el8cp.s390x.rpm
rbd-nbd-14.2.11-95.el8cp.s390x.rpm
rbd-nbd-debuginfo-14.2.11-95.el8cp.s390x.rpm

x86_64:
ceph-base-14.2.11-95.el8cp.x86_64.rpm
ceph-base-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-common-14.2.11-95.el8cp.x86_64.rpm
ceph-common-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-debugsource-14.2.11-95.el8cp.x86_64.rpm
ceph-fuse-14.2.11-95.el8cp.x86_64.rpm
ceph-fuse-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-mds-14.2.11-95.el8cp.x86_64.rpm
ceph-mds-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-mgr-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-mon-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-osd-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-radosgw-14.2.11-95.el8cp.x86_64.rpm
ceph-radosgw-debuginfo-14.2.11-95.el8cp.x86_64.rpm
ceph-selinux-14.2.11-95.el8cp.x86_64.rpm
ceph-test-debuginfo-14.2.11-95.el8cp.x86_64.rpm
libcephfs-devel-14.2.11-95.el8cp.x86_64.rpm
libcephfs2-14.2.11-95.el8cp.x86_64.rpm
libcephfs2-debuginfo-14.2.11-95.el8cp.x86_64.rpm
libntirpc-3.3-0.1.el8cp.x86_64.rpm
libntirpc-debuginfo-3.3-0.1.el8cp.x86_64.rpm
libntirpc-debugsource-3.3-0.1.el8cp.x86_64.rpm
librados-devel-14.2.11-95.el8cp.x86_64.rpm
librados-devel-debuginfo-14.2.11-95.el8cp.x86_64.rpm
librados2-14.2.11-95.el8cp.x86_64.rpm
librados2-debuginfo-14.2.11-95.el8cp.x86_64.rpm
libradospp-devel-14.2.11-95.el8cp.x86_64.rpm
libradosstriper1-14.2.11-95.el8cp.x86_64.rpm
libradosstriper1-debuginfo-14.2.11-95.el8cp.x86_64.rpm
librbd-devel-14.2.11-95.el8cp.x86_64.rpm
librbd1-14.2.11-95.el8cp.x86_64.rpm
librbd1-debuginfo-14.2.11-95.el8cp.x86_64.rpm
librgw-devel-14.2.11-95.el8cp.x86_64.rpm
librgw2-14.2.11-95.el8cp.x86_64.rpm
librgw2-debuginfo-14.2.11-95.el8cp.x86_64.rpm
nfs-ganesha-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-ceph-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-ceph-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-debugsource-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-proxy-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-proxy-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rados-grace-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rados-grace-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rados-urls-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rados-urls-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rgw-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-rgw-debuginfo-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-vfs-3.3-0.4.el8cp.x86_64.rpm
nfs-ganesha-vfs-debuginfo-3.3-0.4.el8cp.x86_64.rpm
python3-ceph-argparse-14.2.11-95.el8cp.x86_64.rpm
python3-cephfs-14.2.11-95.el8cp.x86_64.rpm
python3-cephfs-debuginfo-14.2.11-95.el8cp.x86_64.rpm
python3-rados-14.2.11-95.el8cp.x86_64.rpm
python3-rados-debuginfo-14.2.11-95.el8cp.x86_64.rpm
python3-rbd-14.2.11-95.el8cp.x86_64.rpm
python3-rbd-debuginfo-14.2.11-95.el8cp.x86_64.rpm
python3-rgw-14.2.11-95.el8cp.x86_64.rpm
python3-rgw-debuginfo-14.2.11-95.el8cp.x86_64.rpm
rbd-fuse-debuginfo-14.2.11-95.el8cp.x86_64.rpm
rbd-mirror-14.2.11-95.el8cp.x86_64.rpm
rbd-mirror-debuginfo-14.2.11-95.el8cp.x86_64.rpm
rbd-nbd-14.2.11-95.el8cp.x86_64.rpm
rbd-nbd-debuginfo-14.2.11-95.el8cp.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2020-25660
https://access.redhat.com/security/cve/CVE-2020-25677
https://access.redhat.com/security/cve/CVE-2020-27781
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
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=MfHt
—–END PGP SIGNATURE—–

—
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

Sigurnosni nedostaci programskog paketa Red Hat Ceph Storage

Archives

More in Preporuke

Sigurnosni nedostatak jezgre operacijskog sustava