You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa ceph

Sigurnosni nedostaci programskog paketa ceph

openSUSE Security Update: Security update for ceph
______________________________________________________________________________

Announcement ID: openSUSE-SU-2018:2283-1
Rating: important
References: #1092874 #1094932 #1096748 #1099162
Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129

Affected Products:
openSUSE Leap 42.3
______________________________________________________________________________

An update that solves three vulnerabilities and has one
errata is now available.

Description:

This update for ceph fixes the following issues:

Security issues fixed:

– CVE-2018-10861: Ensure that ceph-mon does perform authorization on all
OSD pool ops (bsc#1099162)
– CVE-2018-1129: cephx signature check bypass (bsc#1096748)
– CVE-2018-1128: cephx protocol was vulnerable to replay attack
(bsc#1096748)

Bugs fixed in 12.2.7-420-gc0ef85b854:

– luminous: osd: eternal stuck PG in ‘unfound_recovery’ (bsc#1094932)
– bluestore: db.slow used when db is not full (bsc#1092874)
– Upstream fixes and improvements, see

12.2.7 Luminous released

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-854=1

Package List:

– openSUSE Leap 42.3 (x86_64):

ceph-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-base-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-base-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-common-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-common-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-debugsource-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-fuse-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-fuse-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mds-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mds-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mgr-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mgr-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mon-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-mon-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-osd-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-osd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-radosgw-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-radosgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-resource-agents-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-test-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-test-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
ceph-test-debugsource-12.2.7+git.1531910353.c0ef85b854-12.1
libcephfs-devel-12.2.7+git.1531910353.c0ef85b854-12.1
libcephfs2-12.2.7+git.1531910353.c0ef85b854-12.1
libcephfs2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
librados-devel-12.2.7+git.1531910353.c0ef85b854-12.1
librados-devel-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
librados2-12.2.7+git.1531910353.c0ef85b854-12.1
librados2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
libradosstriper-devel-12.2.7+git.1531910353.c0ef85b854-12.1
libradosstriper1-12.2.7+git.1531910353.c0ef85b854-12.1
libradosstriper1-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
librbd-devel-12.2.7+git.1531910353.c0ef85b854-12.1
librbd1-12.2.7+git.1531910353.c0ef85b854-12.1
librbd1-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
librgw-devel-12.2.7+git.1531910353.c0ef85b854-12.1
librgw2-12.2.7+git.1531910353.c0ef85b854-12.1
librgw2-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python-ceph-compat-12.2.7+git.1531910353.c0ef85b854-12.1
python-cephfs-12.2.7+git.1531910353.c0ef85b854-12.1
python-cephfs-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python-rados-12.2.7+git.1531910353.c0ef85b854-12.1
python-rados-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python-rbd-12.2.7+git.1531910353.c0ef85b854-12.1
python-rbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python-rgw-12.2.7+git.1531910353.c0ef85b854-12.1
python-rgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python3-ceph-argparse-12.2.7+git.1531910353.c0ef85b854-12.1
python3-cephfs-12.2.7+git.1531910353.c0ef85b854-12.1
python3-cephfs-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rados-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rados-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rbd-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rgw-12.2.7+git.1531910353.c0ef85b854-12.1
python3-rgw-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
rados-objclass-devel-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-fuse-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-fuse-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-mirror-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-mirror-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-nbd-12.2.7+git.1531910353.c0ef85b854-12.1
rbd-nbd-debuginfo-12.2.7+git.1531910353.c0ef85b854-12.1

References:

https://www.suse.com/security/cve/CVE-2018-10861.html
https://www.suse.com/security/cve/CVE-2018-1128.html
https://www.suse.com/security/cve/CVE-2018-1129.html
https://bugzilla.suse.com/1092874
https://bugzilla.suse.com/1094932
https://bugzilla.suse.com/1096748
https://bugzilla.suse.com/1099162


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

Top
More in Preporuke
Sigurnosni nedostaci programske biblioteke libcdio

Otkriveni su sigurnosni nedostaci programske biblioteke libcdio za operacijski sustav openSUSE. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje DoS stanja ili...

Close