openSUSE Security Update: Security update for ceph
______________________________________________________________________________

Announcement ID: openSUSE-SU-2018:2479-1
Rating: important
References: #1051598 #1054061 #1056125 #1056967 #1059458
#1060904 #1061461 #1063014 #1066182 #1066502
#1067088 #1067119 #1067705 #1070357 #1071386
#1074301 #1079076 #1080788 #1081379 #1081600
#1086340 #1087269 #1087493
Cross-References: CVE-2017-16818 CVE-2018-7262
Affected Products:
openSUSE Leap 42.3
______________________________________________________________________________

An update that solves two vulnerabilities and has 21 fixes
is now available.

Description:

This update for ceph fixes the following issues:

Security issues fixed:

– CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379).
– CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014).

Bug fixes:

– bsc#1061461: OSDs keep generating coredumps after adding new OSD node to
cluster.
– bsc#1079076: RGW openssl fixes.
– bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs
aborts during start.
– bsc#1056125: Some OSDs are down when doing performance testing on rbd
image in EC Pool.
– bsc#1087269: allow_ec_overwrites option not in command options list.
– bsc#1051598: Fix mountpoint check for systemctl enable –runtime.
– bsc#1070357: Zabbix mgr module doesn’t recover from HEALTH_ERR.
– bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs
do not rejoin the cluster.
– bsc#1067119: Crushtool decompile creates wrong device entries (device 20
device20) for not existing / deleted OSDs.
– bsc#1060904: Loglevel misleading during keystone authentication.
– bsc#1056967: Monitors goes down after pool creation on cluster with 120
OSDs.
– bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH
Ceph Storage 2.
– bsc#1059458: Stopping / restarting rados gateway as part of deepsea
stage.4 executions causes core-dump of radosgw.
– bsc#1087493: Commvault cannot reconnect to storage after restarting
haproxy.
– bsc#1066182: Container synchronization between two Ceph clusters failed.
– bsc#1081600: Crash in civetweb/RGW.
– bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint
on client.
– bsc#1074301: OSDs keep aborting: SnapMapper failed asserts.
– bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with
journaling feature enabled.
– bsc#1080788: fsid mismatch when creating additional OSDs.
– bsc#1071386: Metadata spill onto block.slow.

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-541=1

Package List:

– openSUSE Leap 42.3 (x86_64):

ceph-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-base-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-base-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-common-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-common-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mds-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mds-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mgr-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mgr-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mon-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-mon-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-osd-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-osd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-radosgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-radosgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-resource-agents-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-test-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-test-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
ceph-test-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1
libcephfs-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
libcephfs2-12.2.5+git.1524775272.5e7ea8cf03-9.1
libcephfs2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
librados-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
librados-devel-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
librados2-12.2.5+git.1524775272.5e7ea8cf03-9.1
librados2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
libradosstriper-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
libradosstriper1-12.2.5+git.1524775272.5e7ea8cf03-9.1
libradosstriper1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
librbd-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
librbd1-12.2.5+git.1524775272.5e7ea8cf03-9.1
librbd1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
librgw-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
librgw2-12.2.5+git.1524775272.5e7ea8cf03-9.1
librgw2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-ceph-compat-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
python-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-ceph-argparse-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
python3-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
rados-objclass-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-mirror-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-mirror-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-nbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
rbd-nbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1

References:

https://www.suse.com/security/cve/CVE-2017-16818.html
https://www.suse.com/security/cve/CVE-2018-7262.html
https://bugzilla.suse.com/1051598
https://bugzilla.suse.com/1054061
https://bugzilla.suse.com/1056125
https://bugzilla.suse.com/1056967
https://bugzilla.suse.com/1059458
https://bugzilla.suse.com/1060904
https://bugzilla.suse.com/1061461
https://bugzilla.suse.com/1063014
https://bugzilla.suse.com/1066182
https://bugzilla.suse.com/1066502
https://bugzilla.suse.com/1067088
https://bugzilla.suse.com/1067119
https://bugzilla.suse.com/1067705
https://bugzilla.suse.com/1070357
https://bugzilla.suse.com/1071386
https://bugzilla.suse.com/1074301
https://bugzilla.suse.com/1079076
https://bugzilla.suse.com/1080788
https://bugzilla.suse.com/1081379
https://bugzilla.suse.com/1081600
https://bugzilla.suse.com/1086340
https://bugzilla.suse.com/1087269
https://bugzilla.suse.com/1087493

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org