RHSA-2021:1452: Important: Red Hat Ceph Storage security, bug fix, and enhancement Update

Published Apr 28, 2021
·
Updated

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.The ceph-ansible package provides Ansible playbooks for installing, maintaining, and upgrading Red Hat Ceph Storage.Perf Tools is a collection of performance analysis tools, including a high performance multi-threaded malloc() implementation that works particularly well with threads and STL, a thread-friendly heap-checker, a heap profiler, and a cpu-profiler.The tcmu-runner packages provide a service that handles the complexity of the LIO kernel target's userspace passthrough interface (TCMU). It presents a C plugin API for extension modules that handle SCSI requests in ways not possible or suitable to be handled by LIO's in-kernel backstores.Security Fix(es): tcmu-runner: SCSI target (LIO) write to any block on ILO backstore (CVE-2021-3139) ceph: mgr modules' passwords are in clear text in mgr logs (CVE-2020-25678) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es):These updated packages include numerous bug fixes. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage 4.2 Release Notes for information on the most significant of these changes:https://access.redhat.com/documentation/en-us/redhatcephstorage/4.2/html/releasenotes/index All users of Red Hat Ceph Storage are advised to upgrade to these updatedpackages, which provide numerous bug fixes.

Affected Software

100 affected componentsFixes available
redhat/ceph<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-ansible<4.0.49.2-1.el7c
4.0.49.2-1.el7c
redhat/tcmu-runner<1.5.2-2.el7c
1.5.2-2.el7c
redhat/ceph-base<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-common<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-debuginfo<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-fuse<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-grafana-dashboards<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mds<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-radosgw<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-selinux<14.2.11-147.el7c
14.2.11-147.el7c
redhat/libcephfs-devel<14.2.11-147.el7c
14.2.11-147.el7c
redhat/libcephfs2<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librados-devel<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librados2<14.2.11-147.el7c
14.2.11-147.el7c
redhat/libradospp-devel<14.2.11-147.el7c
14.2.11-147.el7c
redhat/libradosstriper1<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librbd-devel<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librbd1<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librgw-devel<14.2.11-147.el7c
14.2.11-147.el7c
redhat/librgw2<14.2.11-147.el7c
14.2.11-147.el7c
redhat/libtcmu<1.5.2-2.el7c
1.5.2-2.el7c
redhat/python-ceph-argparse<14.2.11-147.el7c
14.2.11-147.el7c
redhat/python-cephfs<14.2.11-147.el7c
14.2.11-147.el7c
redhat/python-rados<14.2.11-147.el7c
14.2.11-147.el7c
redhat/python-rbd<14.2.11-147.el7c
14.2.11-147.el7c
redhat/python-rgw<14.2.11-147.el7c
14.2.11-147.el7c
redhat/rbd-mirror<14.2.11-147.el7c
14.2.11-147.el7c
redhat/rbd-nbd<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph<14.2.11-147.el8c
14.2.11-147.el8c
redhat/gperftools<2.6.3-3.el8c
2.6.3-3.el8c
redhat/ceph-base<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-base-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-common<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-common-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-debugsource<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-fuse-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-grafana-dashboards<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mds-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr-dashboard<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr-diskprediction-local<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr-k8sevents<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr-rook<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mon<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mon-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-osd-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-radosgw-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-selinux<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-test<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-test-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/gperftools-debugsource<2.6.3-3.el8c
2.6.3-3.el8c
redhat/gperftools-libs<2.6.3-3.el8c
2.6.3-3.el8c
redhat/gperftools-libs-debuginfo<2.6.3-3.el8c
2.6.3-3.el8c
redhat/libcephfs-devel<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libcephfs2<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libcephfs2-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librados-devel<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librados-devel-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librados2<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librados2-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libradospp-devel<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libradosstriper1<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libradosstriper1-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librbd-devel<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librbd1<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librbd1-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librgw-devel<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librgw2<14.2.11-147.el8c
14.2.11-147.el8c
redhat/librgw2-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-ceph-argparse<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-cephfs<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-cephfs-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rados<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rados-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rbd<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rbd-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rgw<14.2.11-147.el8c
14.2.11-147.el8c
redhat/python3-rgw-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/rbd-fuse-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/rbd-mirror-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/rbd-nbd-debuginfo<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mgr<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mgr-dashboard<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mgr-diskprediction-local<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mgr-k8sevents<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mgr-rook<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-mon<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-test<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-osd<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-osd<14.2.11-147.el7c
14.2.11-147.el7c
redhat/ceph-ansible<4.0.49.2-1.el8c
4.0.49.2-1.el8c
redhat/tcmu-runner<1.5.2-3.el8c
1.5.2-3.el8c
redhat/ceph-fuse<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-mds<14.2.11-147.el8c
14.2.11-147.el8c
redhat/ceph-radosgw<14.2.11-147.el8c
14.2.11-147.el8c
redhat/libtcmu<1.5.2-3.el8c
1.5.2-3.el8c
redhat/rbd-mirror<14.2.11-147.el8c
14.2.11-147.el8c
redhat/rbd-nbd<14.2.11-147.el8c
14.2.11-147.el8c

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/ceph to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  2. Upgrade

    Upgrade redhat/gperftools to a version that resolves this vulnerability.

    Fixed in 2.6.3-3.el8c
  3. Upgrade

    Upgrade redhat/ceph-base to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  4. Upgrade

    Upgrade redhat/ceph-base-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  5. Upgrade

    Upgrade redhat/ceph-common to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  6. Upgrade

    Upgrade redhat/ceph-common-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  7. Upgrade

    Upgrade redhat/ceph-debugsource to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  8. Upgrade

    Upgrade redhat/ceph-fuse-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  9. Upgrade

    Upgrade redhat/ceph-grafana-dashboards to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  10. Upgrade

    Upgrade redhat/ceph-mds-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  11. Upgrade

    Upgrade redhat/ceph-mgr to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  12. Upgrade

    Upgrade redhat/ceph-mgr-dashboard to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  13. Upgrade

    Upgrade redhat/ceph-mgr-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  14. Upgrade

    Upgrade redhat/ceph-mgr-diskprediction-local to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  15. Upgrade

    Upgrade redhat/ceph-mgr-k8sevents to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  16. Upgrade

    Upgrade redhat/ceph-mgr-rook to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  17. Upgrade

    Upgrade redhat/ceph-mon to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  18. Upgrade

    Upgrade redhat/ceph-mon-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  19. Upgrade

    Upgrade redhat/ceph-osd-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  20. Upgrade

    Upgrade redhat/ceph-radosgw-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  21. Upgrade

    Upgrade redhat/ceph-selinux to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  22. Upgrade

    Upgrade redhat/ceph-test to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  23. Upgrade

    Upgrade redhat/ceph-test-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  24. Upgrade

    Upgrade redhat/gperftools-debugsource to a version that resolves this vulnerability.

    Fixed in 2.6.3-3.el8c
  25. Upgrade

    Upgrade redhat/gperftools-libs to a version that resolves this vulnerability.

    Fixed in 2.6.3-3.el8c
  26. Upgrade

    Upgrade redhat/gperftools-libs-debuginfo to a version that resolves this vulnerability.

    Fixed in 2.6.3-3.el8c
  27. Upgrade

    Upgrade redhat/libcephfs-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  28. Upgrade

    Upgrade redhat/libcephfs2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  29. Upgrade

    Upgrade redhat/libcephfs2-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  30. Upgrade

    Upgrade redhat/librados-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  31. Upgrade

    Upgrade redhat/librados-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  32. Upgrade

    Upgrade redhat/librados2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  33. Upgrade

    Upgrade redhat/librados2-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  34. Upgrade

    Upgrade redhat/libradospp-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  35. Upgrade

    Upgrade redhat/libradosstriper1 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  36. Upgrade

    Upgrade redhat/libradosstriper1-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  37. Upgrade

    Upgrade redhat/librbd-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  38. Upgrade

    Upgrade redhat/librbd1 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  39. Upgrade

    Upgrade redhat/librbd1-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  40. Upgrade

    Upgrade redhat/librgw-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  41. Upgrade

    Upgrade redhat/librgw2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  42. Upgrade

    Upgrade redhat/librgw2-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  43. Upgrade

    Upgrade redhat/python3-ceph-argparse to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  44. Upgrade

    Upgrade redhat/python3-cephfs to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  45. Upgrade

    Upgrade redhat/python3-cephfs-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  46. Upgrade

    Upgrade redhat/python3-rados to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  47. Upgrade

    Upgrade redhat/python3-rados-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  48. Upgrade

    Upgrade redhat/python3-rbd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  49. Upgrade

    Upgrade redhat/python3-rbd-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  50. Upgrade

    Upgrade redhat/python3-rgw to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  51. Upgrade

    Upgrade redhat/python3-rgw-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  52. Upgrade

    Upgrade redhat/rbd-fuse-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  53. Upgrade

    Upgrade redhat/rbd-mirror-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  54. Upgrade

    Upgrade redhat/rbd-nbd-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  55. Upgrade

    Upgrade redhat/ceph-osd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  56. Upgrade

    Upgrade redhat/ceph to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  57. Upgrade

    Upgrade redhat/ceph-base to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  58. Upgrade

    Upgrade redhat/ceph-common to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  59. Upgrade

    Upgrade redhat/ceph-debuginfo to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  60. Upgrade

    Upgrade redhat/ceph-osd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  61. Upgrade

    Upgrade redhat/ceph-selinux to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  62. Upgrade

    Upgrade redhat/ceph-test to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  63. Upgrade

    Upgrade redhat/libcephfs-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  64. Upgrade

    Upgrade redhat/libcephfs2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  65. Upgrade

    Upgrade redhat/librados-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  66. Upgrade

    Upgrade redhat/librados2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  67. Upgrade

    Upgrade redhat/libradospp-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  68. Upgrade

    Upgrade redhat/libradosstriper1 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  69. Upgrade

    Upgrade redhat/librbd-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  70. Upgrade

    Upgrade redhat/librbd1 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  71. Upgrade

    Upgrade redhat/librgw-devel to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  72. Upgrade

    Upgrade redhat/librgw2 to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  73. Upgrade

    Upgrade redhat/python-ceph-argparse to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  74. Upgrade

    Upgrade redhat/python-cephfs to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  75. Upgrade

    Upgrade redhat/python-rados to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  76. Upgrade

    Upgrade redhat/python-rbd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  77. Upgrade

    Upgrade redhat/python-rgw to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  78. Upgrade

    Upgrade redhat/ceph-ansible to a version that resolves this vulnerability.

    Fixed in 4.0.49.2-1.el8c
  79. Upgrade

    Upgrade redhat/tcmu-runner to a version that resolves this vulnerability.

    Fixed in 1.5.2-3.el8c
  80. Upgrade

    Upgrade redhat/ceph-fuse to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  81. Upgrade

    Upgrade redhat/ceph-mds to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  82. Upgrade

    Upgrade redhat/ceph-radosgw to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  83. Upgrade

    Upgrade redhat/libtcmu to a version that resolves this vulnerability.

    Fixed in 1.5.2-3.el8c
  84. Upgrade

    Upgrade redhat/rbd-mirror to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  85. Upgrade

    Upgrade redhat/rbd-nbd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el8c
  86. Upgrade

    Upgrade redhat/ceph-ansible to a version that resolves this vulnerability.

    Fixed in 4.0.49.2-1.el7c
  87. Upgrade

    Upgrade redhat/tcmu-runner to a version that resolves this vulnerability.

    Fixed in 1.5.2-2.el7c
  88. Upgrade

    Upgrade redhat/ceph-fuse to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  89. Upgrade

    Upgrade redhat/ceph-grafana-dashboards to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  90. Upgrade

    Upgrade redhat/ceph-mds to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  91. Upgrade

    Upgrade redhat/ceph-radosgw to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  92. Upgrade

    Upgrade redhat/libtcmu to a version that resolves this vulnerability.

    Fixed in 1.5.2-2.el7c
  93. Upgrade

    Upgrade redhat/rbd-mirror to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  94. Upgrade

    Upgrade redhat/rbd-nbd to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  95. Upgrade

    Upgrade redhat/ceph-mgr to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  96. Upgrade

    Upgrade redhat/ceph-mgr-dashboard to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  97. Upgrade

    Upgrade redhat/ceph-mgr-diskprediction-local to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  98. Upgrade

    Upgrade redhat/ceph-mgr-k8sevents to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  99. Upgrade

    Upgrade redhat/ceph-mgr-rook to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c
  100. Upgrade

    Upgrade redhat/ceph-mon to a version that resolves this vulnerability.

    Fixed in 14.2.11-147.el7c

Event History

Jul 26, 2026
Advisory Published
via Red Hat·05:43 PM
Data Sourced
via Red Hat·05:43 PM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2021:1452?

The severity of RHSA-2021:1452 is classified as critical.

2

How do I fix RHSA-2021:1452?

To remediate RHSA-2021:1452, upgrade to the patched versions of the affected packages listed in the advisory.

3

Which packages are affected by RHSA-2021:1452?

The affected packages include ceph, ceph-ansible, tcmu-runner, and various associated libraries in specific versions.

4

What versions should be updated for RHSA-2021:1452?

You should update to ceph 14.2.11-147.el7c or 14.2.11-147.el8c, among other specified versions for affected packages.

5

Is RHSA-2021:1452 specific to certain operating systems?

Yes, RHSA-2021:1452 is specific to Red Hat Enterprise Linux 7 and 8.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203