An update for ceph is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-1838 Final 1.0 1.0 2025-07-18 Initial 2025-07-18 2025-07-18 openEuler SA Tool V1.0 2025-07-18 ceph security update An update for ceph is now available for openEuler-24.03-LTS-SP1 Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fix(es): Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.(CVE-2025-52555) An update for ceph is now available for openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium ceph https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1838 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-52555 https://nvd.nist.gov/vuln/detail/CVE-2025-52555 openEuler-24.03-LTS-SP1 ceph-18.2.2-8.oe2403sp1.aarch64.rpm ceph-base-18.2.2-8.oe2403sp1.aarch64.rpm ceph-common-18.2.2-8.oe2403sp1.aarch64.rpm ceph-debuginfo-18.2.2-8.oe2403sp1.aarch64.rpm ceph-debugsource-18.2.2-8.oe2403sp1.aarch64.rpm ceph-exporter-18.2.2-8.oe2403sp1.aarch64.rpm ceph-fuse-18.2.2-8.oe2403sp1.aarch64.rpm ceph-immutable-object-cache-18.2.2-8.oe2403sp1.aarch64.rpm ceph-mds-18.2.2-8.oe2403sp1.aarch64.rpm ceph-mgr-18.2.2-8.oe2403sp1.aarch64.rpm ceph-mon-18.2.2-8.oe2403sp1.aarch64.rpm ceph-osd-18.2.2-8.oe2403sp1.aarch64.rpm ceph-radosgw-18.2.2-8.oe2403sp1.aarch64.rpm ceph-selinux-18.2.2-8.oe2403sp1.aarch64.rpm ceph-test-18.2.2-8.oe2403sp1.aarch64.rpm cephfs-mirror-18.2.2-8.oe2403sp1.aarch64.rpm libcephfs-devel-18.2.2-8.oe2403sp1.aarch64.rpm libcephfs2-18.2.2-8.oe2403sp1.aarch64.rpm libcephsqlite-18.2.2-8.oe2403sp1.aarch64.rpm libcephsqlite-devel-18.2.2-8.oe2403sp1.aarch64.rpm librados-devel-18.2.2-8.oe2403sp1.aarch64.rpm librados2-18.2.2-8.oe2403sp1.aarch64.rpm libradospp-devel-18.2.2-8.oe2403sp1.aarch64.rpm libradosstriper-devel-18.2.2-8.oe2403sp1.aarch64.rpm libradosstriper1-18.2.2-8.oe2403sp1.aarch64.rpm librbd-devel-18.2.2-8.oe2403sp1.aarch64.rpm librbd1-18.2.2-8.oe2403sp1.aarch64.rpm librgw-devel-18.2.2-8.oe2403sp1.aarch64.rpm librgw2-18.2.2-8.oe2403sp1.aarch64.rpm python3-ceph-argparse-18.2.2-8.oe2403sp1.aarch64.rpm python3-ceph-common-18.2.2-8.oe2403sp1.aarch64.rpm python3-cephfs-18.2.2-8.oe2403sp1.aarch64.rpm python3-rados-18.2.2-8.oe2403sp1.aarch64.rpm python3-rbd-18.2.2-8.oe2403sp1.aarch64.rpm python3-rgw-18.2.2-8.oe2403sp1.aarch64.rpm rados-objclass-devel-18.2.2-8.oe2403sp1.aarch64.rpm rbd-fuse-18.2.2-8.oe2403sp1.aarch64.rpm rbd-mirror-18.2.2-8.oe2403sp1.aarch64.rpm rbd-nbd-18.2.2-8.oe2403sp1.aarch64.rpm ceph-18.2.2-8.oe2403sp1.src.rpm ceph-18.2.2-8.oe2403sp1.x86_64.rpm ceph-base-18.2.2-8.oe2403sp1.x86_64.rpm ceph-common-18.2.2-8.oe2403sp1.x86_64.rpm ceph-debuginfo-18.2.2-8.oe2403sp1.x86_64.rpm ceph-debugsource-18.2.2-8.oe2403sp1.x86_64.rpm ceph-exporter-18.2.2-8.oe2403sp1.x86_64.rpm ceph-fuse-18.2.2-8.oe2403sp1.x86_64.rpm ceph-immutable-object-cache-18.2.2-8.oe2403sp1.x86_64.rpm ceph-mds-18.2.2-8.oe2403sp1.x86_64.rpm ceph-mgr-18.2.2-8.oe2403sp1.x86_64.rpm ceph-mon-18.2.2-8.oe2403sp1.x86_64.rpm ceph-osd-18.2.2-8.oe2403sp1.x86_64.rpm ceph-radosgw-18.2.2-8.oe2403sp1.x86_64.rpm ceph-selinux-18.2.2-8.oe2403sp1.x86_64.rpm ceph-test-18.2.2-8.oe2403sp1.x86_64.rpm cephfs-mirror-18.2.2-8.oe2403sp1.x86_64.rpm libcephfs-devel-18.2.2-8.oe2403sp1.x86_64.rpm libcephfs2-18.2.2-8.oe2403sp1.x86_64.rpm libcephsqlite-18.2.2-8.oe2403sp1.x86_64.rpm libcephsqlite-devel-18.2.2-8.oe2403sp1.x86_64.rpm librados-devel-18.2.2-8.oe2403sp1.x86_64.rpm librados2-18.2.2-8.oe2403sp1.x86_64.rpm libradospp-devel-18.2.2-8.oe2403sp1.x86_64.rpm libradosstriper-devel-18.2.2-8.oe2403sp1.x86_64.rpm libradosstriper1-18.2.2-8.oe2403sp1.x86_64.rpm librbd-devel-18.2.2-8.oe2403sp1.x86_64.rpm librbd1-18.2.2-8.oe2403sp1.x86_64.rpm librgw-devel-18.2.2-8.oe2403sp1.x86_64.rpm librgw2-18.2.2-8.oe2403sp1.x86_64.rpm python3-ceph-argparse-18.2.2-8.oe2403sp1.x86_64.rpm python3-ceph-common-18.2.2-8.oe2403sp1.x86_64.rpm python3-cephfs-18.2.2-8.oe2403sp1.x86_64.rpm python3-rados-18.2.2-8.oe2403sp1.x86_64.rpm python3-rbd-18.2.2-8.oe2403sp1.x86_64.rpm python3-rgw-18.2.2-8.oe2403sp1.x86_64.rpm rados-objclass-devel-18.2.2-8.oe2403sp1.x86_64.rpm rbd-fuse-18.2.2-8.oe2403sp1.x86_64.rpm rbd-mirror-18.2.2-8.oe2403sp1.x86_64.rpm rbd-nbd-18.2.2-8.oe2403sp1.x86_64.rpm ceph-grafana-dashboards-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-cephadm-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-dashboard-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-diskprediction-local-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-k8sevents-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-modules-core-18.2.2-8.oe2403sp1.noarch.rpm ceph-mgr-rook-18.2.2-8.oe2403sp1.noarch.rpm ceph-mib-18.2.2-8.oe2403sp1.noarch.rpm ceph-prometheus-alerts-18.2.2-8.oe2403sp1.noarch.rpm ceph-resource-agents-18.2.2-8.oe2403sp1.noarch.rpm ceph-volume-18.2.2-8.oe2403sp1.noarch.rpm cephadm-18.2.2-8.oe2403sp1.noarch.rpm cephfs-top-18.2.2-8.oe2403sp1.noarch.rpm Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3. 2025-07-18 CVE-2025-52555 openEuler-24.03-LTS-SP1 Medium 6.5 AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N ceph security update 2025-07-18 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1838