Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users

Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

Ceph: CephX AES Authentication error

Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation

A flaw was found in the way ceph mon handles user requests

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests

A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects

A flaw was found in the way signature calculation was handled by cephx authentication protocol

A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable

In Ceph, a format string flaw was found in the way libradosstriper parses input from user