Back Linuxsecurity Fedora 43 Ceph 19.2.6 Security Flaws in Authentication and Authorization
Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×
Ceph is a massively scalable, open-source, distributed storage system that runs
on commodity hardware and delivers object, block and file system storage.
Ceph 19.2.6 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC. CVE-2026-39944 shares the unauthenticated-encryption root cause of CVE-2025-30156 CVE-2026-50152 is an improper authorization flaw in the Ceph Monitor subscription handler. CVE-2026-54330 is a flaw in RGW not properly verifying its SigV4 cryptographic signatures in RGW's SigV4 verifier.
* Wed Aug 19 2026 Kaleb S. KEITHLEY - 2:19.2.6-1 - ceph-19.2.6 GA * Thu Jul 16 2026 Kaleb S. KEITHLEY - 2:19.2.5-1 - ceph-19.2.5 GA
* Wed Aug 19 2026 Kaleb S. KEITHLEY - 2:19.2.6-1 - ceph-19.2.6 GA * Thu Jul 16 2026 Kaleb S. KEITHLEY - 2:19.2.5-1 - ceph-19.2.5 GA
Fedora Update Notification FEDORA-2026-ebffec502b 2026-08-22 01:12:20.658007+00:00 Name : ceph Product : Fedora 43 Version : 19.2.6 Release : 1.fc43 URL : Summary : User space components of the Ceph file system Description : Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ebffec502b' at the command line. For more information, refer to the dnf documentation available at
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
