RHSA-2020:5325: Moderate: Red Hat Ceph Storage 4.1 security and bug fix update

Q: What is the severity of RHSA-2020:5325?

The severity of RHSA-2020:5325 is classified as important due to the potential risk of a replay attack.

Q: How do I fix RHSA-2020:5325?

To fix RHSA-2020:5325, update your packages to version 14.2.8-115.el7c or 14.2.8-115.el8c depending on your system.

Q: Which packages are affected by RHSA-2020:5325?

RHSA-2020:5325 affects several Ceph packages including ceph, ceph-base, and ceph-common among others.

Q: What vulnerabilities does RHSA-2020:5325 address?

RHSA-2020:5325 addresses vulnerabilities related to CEPHX_V2 replay attacks in Red Hat Ceph Storage.

Q: Is there a workaround for RHSA-2020:5325?

There is no specified workaround for RHSA-2020:5325, updating is recommended for full protection.

Published Dec 2, 2020

Updated

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.<br>Security Fix(es):<br><li> ceph: CEPHXV2 replay attack protection lost (CVE-2020-25660)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

90 affected componentsFixes available

redhat/ceph<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-base<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-common<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-debuginfo<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-fuse<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-grafana-dashboards<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mds<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-radosgw<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-selinux<14.2.8-115.el7c

14.2.8-115.el7c

redhat/libcephfs-devel<14.2.8-115.el7c

14.2.8-115.el7c

redhat/libcephfs2<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librados-devel<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librados2<14.2.8-115.el7c

14.2.8-115.el7c

redhat/libradospp-devel<14.2.8-115.el7c

14.2.8-115.el7c

redhat/libradosstriper1<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librbd-devel<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librbd1<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librgw-devel<14.2.8-115.el7c

14.2.8-115.el7c

redhat/librgw2<14.2.8-115.el7c

14.2.8-115.el7c

redhat/python-ceph-argparse<14.2.8-115.el7c

14.2.8-115.el7c

redhat/python-cephfs<14.2.8-115.el7c

14.2.8-115.el7c

redhat/python-rados<14.2.8-115.el7c

14.2.8-115.el7c

redhat/python-rbd<14.2.8-115.el7c

14.2.8-115.el7c

redhat/python-rgw<14.2.8-115.el7c

14.2.8-115.el7c

redhat/rbd-mirror<14.2.8-115.el7c

14.2.8-115.el7c

redhat/rbd-nbd<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-base<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-base-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-common<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-common-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-debugsource<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-fuse-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-grafana-dashboards<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mds-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr-dashboard<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr-diskprediction-local<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr-k8sevents<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr-rook<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mon<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mon-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-osd-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-radosgw-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-selinux<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-test<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-test-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libcephfs-devel<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libcephfs2<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libcephfs2-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librados-devel<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librados-devel-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librados2<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librados2-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libradospp-devel<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libradosstriper1<14.2.8-115.el8c

14.2.8-115.el8c

redhat/libradosstriper1-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librbd-devel<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librbd1<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librbd1-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librgw-devel<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librgw2<14.2.8-115.el8c

14.2.8-115.el8c

redhat/librgw2-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-ceph-argparse<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-cephfs<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-cephfs-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rados<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rados-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rbd<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rbd-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rgw<14.2.8-115.el8c

14.2.8-115.el8c

redhat/python3-rgw-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/rbd-fuse-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/rbd-mirror-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/rbd-nbd-debuginfo<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mgr<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mgr-dashboard<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mgr-diskprediction-local<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mgr-k8sevents<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mgr-rook<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-mon<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-test<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-osd<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-osd<14.2.8-115.el7c

14.2.8-115.el7c

redhat/ceph-fuse<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-mds<14.2.8-115.el8c

14.2.8-115.el8c

redhat/ceph-radosgw<14.2.8-115.el8c

14.2.8-115.el8c

redhat/rbd-mirror<14.2.8-115.el8c

14.2.8-115.el8c

redhat/rbd-nbd<14.2.8-115.el8c

14.2.8-115.el8c

Remediation

Event History

Oct 2, 2024

Advisory Published

via Red Hat·02:05 AM

Frequently Asked Questions

What is the severity of RHSA-2020:5325?

The severity of RHSA-2020:5325 is classified as important due to the potential risk of a replay attack.

How do I fix RHSA-2020:5325?

To fix RHSA-2020:5325, update your packages to version 14.2.8-115.el7c or 14.2.8-115.el8c depending on your system.

Which packages are affected by RHSA-2020:5325?

RHSA-2020:5325 affects several Ceph packages including ceph, ceph-base, and ceph-common among others.

What vulnerabilities does RHSA-2020:5325 address?

RHSA-2020:5325 addresses vulnerabilities related to CEPHX_V2 replay attacks in Red Hat Ceph Storage.

Is there a workaround for RHSA-2020:5325?

There is no specified workaround for RHSA-2020:5325, updating is recommended for full protection.

RHSA-2020:5325: Moderate: Red Hat Ceph Storage 4.1 security and bug fix update

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of RHSA-2020:5325?

How do I fix RHSA-2020:5325?

Which packages are affected by RHSA-2020:5325?

What vulnerabilities does RHSA-2020:5325 address?

Is there a workaround for RHSA-2020:5325?

Company

Resources

Contact