RHSA-2015:1092Medium

Red Hat Security Advisory: ceph-deploy security update

Published
June 11, 2015
Last Modified
November 21, 2025

🔗 CVE IDs covered (2)

CVE-2015-3010 →CVE-2015-4053 →

📋 Description

CVE-2015-3010 — ceph-deploy: keyring permissions are world readable in ~ceph CVE-2015-4053 — ceph-deploy admin command copies keyring file to /etc/ceph which is world readable

🎯 Affected products5

  • Red Hat Ceph Storage Installer 1.2
  • ceph-deploy-0:1.5.22-0.4.rc1.el6cp.noarch as a component of Red Hat Ceph Storage Installer 1.2
  • ceph-deploy-0:1.5.22-0.4.rc1.el6cp.src as a component of Red Hat Ceph Storage Installer 1.2
  • ceph-deploy-0:1.5.22-0.4.rc1.el7cp.noarch as a component of Red Hat Ceph Storage Installer 1.2
  • ceph-deploy-0:1.5.22-0.4.rc1.el7cp.src as a component of Red Hat Ceph Storage Installer 1.2

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)