{"id":"CVE-2021-3979","aliases":["DEBIAN-CVE-2021-3979","DLA-3629-1","DLA-4310-1","EUVD-2021-27181","GHSA-23g5-cwwr-8xhw","MGASA-2022-0138","OESA-2022-1528","RHSA-2022:1174","RHSA-2022:1716","SUSE-SU-2022:2817-1","SUSE-SU-2022:2818-1","SUSE-SU-2022:4501-1","UBUNTU-CVE-2021-3979","USN-6063-1","openSUSE-SU-2024:12195-1"],"status":"published","title":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00597,"percentile":0.48856,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287","CWE-327"],"published":"2022-02-19T11:04:48Z","modified":"2026-10-23T18:03:32Z","fixes":[{"ecosystem":"Debian:12","package":"ceph","fixed_in":["16.2.9+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["16.2.9+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["16.2.9+ds-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"ceph","fixed_in":["15.2.16-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ceph","fixed_in":["12.2.8-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"ceph","fixed_in":["12.2.8-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ceph","fixed_in":["12.2.8-20.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ceph-test","fixed_in":["16.2.9.536+g41a9f9a5573-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"fmt","fixed_in":["8.0.1-150300.7.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"fmt","fixed_in":["8.0.1-150300.7.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"fmt","fixed_in":["8.0.1-150300.7.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"fmt","fixed_in":["8.0.1-150300.7.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"ceph-test","fixed_in":["16.2.9.536+g41a9f9a5573-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"fmt","fixed_in":["8.0.1-150300.7.5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ceph","fixed_in":["12.2.13-0ubuntu0.18.04.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ceph","fixed_in":["15.2.17-0ubuntu0.20.04.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ceph","fixed_in":["16.2.9.536+g41a9f9a5573-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-2.1+deb10u1"}]}],"versions":["12.2.11+dfsg1-2.1"],"bundled":12},{"source":"osv","ecosystem":"Debian:11","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1+deb11u1"}]}],"versions":["14.2.21-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.16-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-20.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-prometheus-alerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libcephsqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"cephfs-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.1::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.7-98.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8-1.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8-1.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150300.7.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150300.7.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150300.7.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150300.7.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"fmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150300.7.5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.13-0ubuntu0.18.04.11"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2","12.2.11-0ubuntu0.18.04.1","12.2.11-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.1","12.2.12-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.3","12.2.12-0ubuntu0.18.04.4","12.2.12-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.2","12.2.13-0ubuntu0.18.04.3","12.2.13-0ubuntu0.18.04.4","12.2.13-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.6","12.2.13-0ubuntu0.18.04.7","12.2.13-0ubuntu0.18.04.8","12.2.13-0ubuntu0.18.04.10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.17-0ubuntu0.20.04.3"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.2","15.2.8-0ubuntu0.20.04.1","15.2.11-0ubuntu0.20.04.2","15.2.12-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.2","15.2.14-0ubuntu0.20.04.1","15.2.14-0ubuntu0.20.04.2","15.2.16-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.13-0ubuntu0.18.04.11"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2","12.2.11-0ubuntu0.18.04.1","12.2.11-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.1","12.2.12-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.3","12.2.12-0ubuntu0.18.04.4","12.2.12-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.2","12.2.13-0ubuntu0.18.04.3","12.2.13-0ubuntu0.18.04.4","12.2.13-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.6","12.2.13-0ubuntu0.18.04.7","12.2.13-0ubuntu0.18.04.8","12.2.13-0ubuntu0.18.04.10"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.17-0ubuntu0.20.04.3"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.2","15.2.8-0ubuntu0.20.04.1","15.2.11-0ubuntu0.20.04.2","15.2.12-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.2","15.2.14-0ubuntu0.20.04.1","15.2.14-0ubuntu0.20.04.2","15.2.16-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.5-0ubuntu0.22.04.3"}]}],"versions":["16.2.6-0ubuntu1","16.2.6-0ubuntu2","16.2.6-0ubuntu3","16.2.7-0ubuntu1","16.2.7-0ubuntu4","17.1.0-0ubuntu1","17.1.0-0ubuntu2","17.1.0-0ubuntu3","17.2.0-0ubuntu0.22.04.1","17.2.0-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.9.536+g41a9f9a5573-1.1"}]}]}],"products":[{"vendor":"ceph","product":"ceph"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"ceph_storage"},{"vendor":"redhat","product":"ceph_storage_for_ibm_z_systems"},{"vendor":"redhat","product":"ceph_storage_for_power"},{"vendor":"redhat","product":"openshift_container_storage"},{"vendor":"redhat","product":"openshift_data_foundation"},{"vendor":"redhat","product":"openstack_platform"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024788","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3979","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://tracker.ceph.com/issues/54006","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://github.com/ceph/ceph/pull/44765","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/","tags":["vendor-advisory","x_transferred","Mailing List","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3979","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1174","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1716","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q"},{"url":"https://github.com/advisories/GHSA-23g5-cwwr-8xhw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3979","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0138.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29871","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/11/5","tags":["web","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1528","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/5.1/html/release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1835563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1842808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1858720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1949359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1963947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069407","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1174.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3531","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3979","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1987041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079016","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1716.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25658","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/165","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222817-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194131","tags":["report"]},{"url":"https://bugzilla.suse.com/1194875","tags":["report"]},{"url":"https://bugzilla.suse.com/1195359","tags":["report"]},{"url":"https://bugzilla.suse.com/1196044","tags":["report"]},{"url":"https://bugzilla.suse.com/1196733","tags":["report"]},{"url":"https://bugzilla.suse.com/1196785","tags":["report"]},{"url":"https://bugzilla.suse.com/1200064","tags":["report"]},{"url":"https://bugzilla.suse.com/1200553","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3979","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222818-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224501-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178073","tags":["report"]},{"url":"https://bugzilla.suse.com/1194353","tags":["report"]},{"url":"https://bugzilla.suse.com/1196938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3979","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/12/5","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6063-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3854","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3979","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2025-11-03T18:08:00.683Z","cwes":["CWE-327"],"updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-27181","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2025-11-03T18:08:00Z","updated_at":"2026-11-02T19:49:35.000596Z"}],"ghsa":[{"id":"GHSA-23g5-cwwr-8xhw","title":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-26T00:03:29Z","modified":"2025-11-03T21:31:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-287","CWE-327"],"updated_at":"2026-11-02T15:04:19.274788Z"}],"nvd":[{"id":"CVE-2021-3979","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T20:15:09.473Z","modified":"2026-06-17T04:06:19.907Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327","CWE-287"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"CVE-2021-3979","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T20:15:09.473Z","modified":"2026-10-20T10:54:54.763185706Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-3979","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T20:15:09.473Z","modified":"2026-10-23T18:03:32.477223633Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2022-1528","title":"ceph security update","description":"User space components of the Ceph file system.\r\n\r\nSecurity Fix(es):\r\n\r\nThe key length for encrypted devices created using ceph-volume is incorrect. This is due to a bug in ceph_volume/util/encryption.py, where upon writing a key using osd_dmcrypt_key_size it does not pass the key size to the format and open operations following. The default key is then applied in cryptsetup. All versions since Luminous are assumed affected.(CVE-2021-3979)","status":"published","published":"2022-02-19T11:04:48Z","modified":"2026-08-18T01:16:27.661863235Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:1174","title":"Red Hat Security Advisory: Red Hat Ceph Storage 5.1 Security, Enhancement, and Bug Fix update","status":"published","published":"2024-09-16T06:29:55Z","modified":"2026-06-26T12:22:29.353935658Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1716","title":"Red Hat Security Advisory: Red Hat Ceph Storage 4.3 Security and Bug Fix update","status":"published","published":"2024-09-16T06:05:46Z","modified":"2026-07-03T10:01:54Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"UBUNTU-CVE-2021-3979","description":"A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.","status":"published","published":"2022-08-25T20:15:00Z","modified":"2026-04-22T13:00:27.984359Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DLA-3629-1","title":"ceph - security update","status":"published","published":"2023-10-23T00:00:00Z","modified":"2026-03-09T01:20:33.777283Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4310-1","title":"ceph - security update","status":"published","published":"2025-09-25T00:00:00Z","modified":"2025-09-25T22:16:47.259189Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2022-0138","title":"Updated ceph packages fix security vulnerability","description":"Updated ceph packages fix security vulnerabilities: the key length for\nencrypted devices created using ceph-volume is incorrect. This is due to a\nbug in ceph_volume/util/encryption.py which is fixed by this new version.\n(CVE-2021-3979)\n","status":"published","published":"2022-04-13T16:06:19Z","modified":"2026-04-16T04:43:15.608622486Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12195-1","title":"ceph-16.2.9.536+g41a9f9a5573-1.1 on GA media","description":"These are all security issues fixed in the ceph-16.2.9.536+g41a9f9a5573-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:17:27.647918Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2817-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- Update to 16.2.9-536-g41a9f9a5573:\n  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR \n  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)\n\n- Update to 16.2.9-158-gd93952c7eea:\n  + cmake: check for python(\\d)\\.(\\d+) when building boost\n  + make-dist: patch boost source to support python 3.10\n\n- Update to ceph-16.2.9-58-ge2e5cb80063:\n  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths\n\n- Update to 16.2.9.50-g7d9f12156fb:\n  + (jsc#SES-2515) High-availability NFS export \n  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname\n  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit\n\n- Update to 16.2.7-969-g6195a460d89\n  + (jsc#SES-2515) High-availability NFS export \n\n- Update to v16.2.7-654-gd5a90ff46f0\n  + (bsc#1196733) remove build directory during %clean \n\n- Update to v16.2.7-652-gf5dc462fdb5 \n  + (bsc#1194875) [SES7P] include/buffer: include memory\n","status":"published","published":"2022-08-16T10:03:50Z","modified":"2026-02-04T03:02:11.137214Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2818-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- Update to 16.2.9-536-g41a9f9a5573:\n  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR \n  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)\n\n- Update to 16.2.9-158-gd93952c7eea:\n  + cmake: check for python(\\d)\\.(\\d+) when building boost\n  + make-dist: patch boost source to support python 3.10\n\n- Update to ceph-16.2.9-58-ge2e5cb80063:\n  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths\n\n- Update to 16.2.9.50-g7d9f12156fb:\n  + (jsc#SES-2515) High-availability NFS export \n  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname\n  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit\n\n- Update to 16.2.7-969-g6195a460d89\n  + (jsc#SES-2515) High-availability NFS export \n","status":"published","published":"2022-08-16T10:48:21Z","modified":"2026-02-04T03:16:09.087315Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:4501-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\nceph was updated to the Pacific release (16.2.9-536-g41a9f9a5573):\n\n+ (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR \n+ (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)\n+ (bsc#1200064,) Remove last vestiges of docker.io image paths\n+ (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname\n+ (bsc#1196785) cephadm: avoid crashing on expected non-zero exit\n+ (jsc#SES-2515) High-availability NFS export \n+ (bsc#1194875) [SES7P] include/buffer: include \u003cmemory\u003e\n+ cephadm: update image paths to registry.suse.com\n+ cephadm: use snmp-notifier image from registry.suse.de\n+ cephadm: infer the default container image during pull \n+ mgr/cephadm: try to get FQDN for inventory address \n+ (bsc#1194875) common: fix FTBFS due to dout \u0026 need_dynamic on GCC-12\n+ (bsc#1196938) cephadm: preserve authorized_keys file during upgrade\n+ Update Prometheus Container image paths (pr #459)\n+ mgr/dashboard: Fix documentation URL (pr #456)\n+ mgr/dashboard: Adapt downstream branded navigation page (pr #454)\n+ Update prometheus-server version\n+ (bsc#1194353) Downstream branding breaks dashboard npm build \n+ (bsc#1178073) mgr/dashboard: fix downstream NFS doc links\n","status":"published","published":"2022-12-15T12:20:25Z","modified":"2026-02-04T04:15:25.092254Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-6063-1","title":"ceph vulnerabilities","description":"Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths.\nAn attacker could possibly use this issue to create non-random encryption\nkeys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2021-3979)\n\nIt was discovered that Ceph incorrectly handled the volumes plugin. An\nattacker could possibly use this issue to obtain access to any share. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-0670)\n\nIt was discovered that Ceph incorrectly handled crash dumps. A local\nattacker could possibly use this issue to escalate privileges to root. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-3650)\n\nIt was discovered that Ceph incorrectly handled URL processing on RGW\nbackends. An attacker could possibly use this issue to cause RGW to crash,\nleading to a denial of service. This issue only affected Ubuntu 22.04 LTS\nand Ubuntu 22.10. (CVE-2022-3854)\n","status":"published","published":"2023-05-09T21:51:19Z","modified":"2026-04-22T10:35:19.026502Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}