Red Hat Security Advisory: Red Hat Ceph Storage 3.3 Security and Bug Fix Update

CVE-2020-12059 — ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW CVE-2020-13379 — grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL CVE-2020-27781 — ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila CVE-2021-3139 — tcmu-runner: SCSI target (LIO) write to any block on ILO backstore