RHSA-2024:0745MediumCVSS 6.3

Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Security update

Published
February 8, 2024
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2023-43040 →CVE-2023-46159 →

📋 Description

CVE-2023-43040 — rgw: improperly verified POST keys CVE-2023-46159 — ceph: RGW crash upon misconfigured CORS rule

🎯 Affected products200

  • Red Hat Ceph Storage 5.3 MON
  • Red Hat Ceph Storage 5.3 OSD
  • Red Hat Ceph Storage 5.3 Tools
  • ceph-2:16.2.10-248.el8cp.src as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-2:16.2.10-248.el8cp.src as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-2:16.2.10-248.el8cp.src as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-2:16.2.10-248.el9cp.src as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-ansible-0:6.0.28.7-1.el8cp.noarch as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-ansible-0:6.0.28.7-1.el8cp.src as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el9cp.ppc64le as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el9cp.s390x as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-2:16.2.10-248.el9cp.x86_64 as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.ppc64le as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.s390x as a component of Red Hat Ceph Storage 5.3 Tools
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 MON
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 OSD
  • ceph-base-debuginfo-2:16.2.10-248.el8cp.x86_64 as a component of Red Hat Ceph Storage 5.3 Tools
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/5/html-single/upgrade_guide/index#upgrade-a-red-hat-ceph-storage-cluster-using-cephadm For supported configurations, refer to: https://access.redhat.com/articles/1548993

🔗 References (51)