SUSE-SU-2017:2922-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:2922-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2017:2922-1
Related
Published
2017-11-02T12:09:07Z
Modified
2017-11-02T12:09:07Z
Summary
Security update for ceph
Details

CEPH was updated to version 10.2.10, which brings several fixes and enhancements.

Upstream 10.2.10 release summary can be found at: https://ceph.com/releases/v10-2-10-jewel-released/

Security issues fixed:

  • CVE-2017-7519: libradosstriper processed arbitrary printf placeholders in user input (bsc#1043767)

Non-security issues fixed:

  • Add explicit Before=ceph.target to systemd service file. (bsc#1042973)
  • ceph-disk omits '--runtime' when enabling ceph-osd@$ID.service units. (bsc#1051598, bsc#1056536)
  • Make it possible to customize ceph-disk's timeout and set default to 3h. (bsc#1051432)
  • Move ceph-disk from ceph-common to ceph-base.
References

Affected packages

SUSE:Enterprise Storage 4 / ceph

Package

Name
ceph
Purl
purl:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.2.10+git.1507616349.698469bd8d-12.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "rbd-mirror": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-osd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librbd1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-ceph-compat": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-fuse": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-common": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-mds": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librgw2": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-rbd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librados2": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-mon": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-test": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "rbd-nbd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-radosgw": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "libcephfs1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-base": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-rados": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-cephfs": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "libradosstriper1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "rbd-fuse": "10.2.10+git.1507616349.698469bd8d-12.6.1"
        }
    ]
}

SUSE:Enterprise Storage 4 / ceph-test

Package

Name
ceph-test
Purl
purl:rpm/suse/ceph-test&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.2.10+git.1507616349.698469bd8d-12.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "rbd-mirror": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-osd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librbd1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-ceph-compat": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-fuse": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-common": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-mds": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librgw2": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-rbd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "librados2": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-mon": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-test": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "rbd-nbd": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-radosgw": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "libcephfs1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "ceph-base": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-rados": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "python-cephfs": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "libradosstriper1": "10.2.10+git.1507616349.698469bd8d-12.6.1",
            "rbd-fuse": "10.2.10+git.1507616349.698469bd8d-12.6.1"
        }
    ]
}