A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "ceph", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-common", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-common-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-common-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fs-common", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fs-common-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fs-common-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fuse", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fuse-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-fuse-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-mds", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-mds-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-mds-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-resource-agents", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-test", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-test-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "ceph-test-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs-dev", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs-java", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs-jni", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs-jni-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs-jni-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs1", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs1-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libcephfs1-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librados-dev", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librados2", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librados2-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librados2-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libradosstriper-dev", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libradosstriper1", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libradosstriper1-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "libradosstriper1-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librbd-dev", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librbd1", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librbd1-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librbd1-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librgw-dev", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librgw2", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librgw2-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "librgw2-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "python-ceph", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "python-cephfs", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "python-rados", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "python-rbd", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "radosgw", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "radosgw-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "radosgw-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-fuse", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-fuse-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-fuse-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-mirror", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-mirror-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-mirror-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-nbd", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-nbd-dbg", "binary_version": "10.2.11-0ubuntu0.16.04.1" }, { "binary_name": "rbd-nbd-dbgsym", "binary_version": "10.2.11-0ubuntu0.16.04.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "ceph", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-base", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-base-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-common", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-common-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-fuse", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-fuse-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mds", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mds-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mgr", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mgr-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mon", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-mon-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-osd", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-osd-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-resource-agents", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-test", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "ceph-test-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs-java", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs-jni", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs-jni-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs2", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libcephfs2-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librados-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librados-dev-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librados2", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librados2-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libradosstriper-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libradosstriper1", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "libradosstriper1-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librbd-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librbd1", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librbd1-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librgw-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librgw2", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "librgw2-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-ceph", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-cephfs", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-cephfs-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rados", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rados-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rbd", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rbd-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rgw", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python-rgw-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-ceph-argparse", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-cephfs", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-cephfs-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rados", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rados-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rbd", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rbd-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rgw", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "python3-rgw-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rados-objclass-dev", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "radosgw", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "radosgw-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-fuse", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-fuse-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-mirror", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-mirror-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-nbd", "binary_version": "12.2.7-0ubuntu0.18.04.1" }, { "binary_name": "rbd-nbd-dbgsym", "binary_version": "12.2.7-0ubuntu0.18.04.1" } ] }