SUSE-SU-2022:4501-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20224501-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4501-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:4501-1

Related

CVE-2021-3979

Published

2022-12-15T12:20:25Z

Modified

2022-12-15T12:20:25Z

Summary

Security update for ceph

Details

This update for ceph fixes the following issues:

ceph was updated to the Pacific release (16.2.9-536-g41a9f9a5573):

(bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
(bsc#1194131) ceph-volume: honour osddmcryptkey_size option (CVE-2021-3979)
(bsc#1200064,) Remove last vestiges of docker.io image paths
(bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
(bsc#1196785) cephadm: avoid crashing on expected non-zero exit
(jsc#SES-2515) High-availability NFS export
(bsc#1194875) [SES7P] include/buffer: include <memory>
cephadm: update image paths to registry.suse.com
cephadm: use snmp-notifier image from registry.suse.de
cephadm: infer the default container image during pull
mgr/cephadm: try to get FQDN for inventory address
(bsc#1194875) common: fix FTBFS due to dout & need_dynamic on GCC-12
(bsc#1196938) cephadm: preserve authorized_keys file during upgrade
Update Prometheus Container image paths (pr #459)
mgr/dashboard: Fix documentation URL (pr #456)
mgr/dashboard: Adapt downstream branded navigation page (pr #454)
Update prometheus-server version
(bsc#1194353) Downstream branding breaks dashboard npm build
(bsc#1178073) mgr/dashboard: fix downstream NFS doc links

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / ceph

Package

Name: ceph
Purl: pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-cephfs": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rados": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1",
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-argparse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rados-objclass-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-nbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libradospp-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / fmt

Package

Name: fmt
Purl: pkg:rpm/suse/fmt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.1-150300.7.5.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-cephfs": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rados": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1",
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-argparse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rados-objclass-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-nbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libradospp-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / ceph

Package

Name: ceph
Purl: pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / fmt

Package

Name: fmt
Purl: pkg:rpm/suse/fmt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.1-150300.7.5.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.2 / ceph

Package

Name: ceph
Purl: pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.2 / fmt

Package

Name: fmt
Purl: pkg:rpm/suse/fmt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.1-150300.7.5.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

openSUSE:Leap Micro 5.2 / ceph

Package

Name: ceph
Purl: pkg:rpm/opensuse/ceph&distro=openSUSE%20Leap%20Micro%205.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

openSUSE:Leap Micro 5.2 / fmt

Package

Name: fmt
Purl: pkg:rpm/opensuse/fmt&distro=openSUSE%20Leap%20Micro%205.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.1-150300.7.5.1

Ecosystem specific

{
    "binaries": [
        {
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1"
        }
    ]
}

openSUSE:Leap 15.3 / ceph

Package

Name: ceph
Purl: pkg:rpm/opensuse/ceph&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-cephfs": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-osd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1",
            "ceph-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mds": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-argparse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mon": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rados-objclass-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-nbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-radosgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libradospp-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-immutable-object-cache": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-mirror": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-modules-core": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rados": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-grafana-dashboards": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephfs-shell": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-diskprediction-local": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-test": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-base": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-prometheus-alerts": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-rook": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-dashboard": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-k8sevents": "16.2.9.536+g41a9f9a5573-150300.6.3.1"
        }
    ]
}

openSUSE:Leap 15.3 / ceph-test

Package

Name: ceph-test
Purl: pkg:rpm/opensuse/ceph-test&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.2.9.536+g41a9f9a5573-150300.6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-cephfs": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-osd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1",
            "ceph-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mds": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-argparse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mon": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rados-objclass-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-nbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-radosgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libradospp-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-immutable-object-cache": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-mirror": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-modules-core": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rados": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-grafana-dashboards": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephfs-shell": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-diskprediction-local": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-test": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-base": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-prometheus-alerts": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-rook": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-dashboard": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-k8sevents": "16.2.9.536+g41a9f9a5573-150300.6.3.1"
        }
    ]
}

openSUSE:Leap 15.3 / fmt

Package

Name: fmt
Purl: pkg:rpm/opensuse/fmt&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.1-150300.7.5.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-cephfs": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-osd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libfmt8": "8.0.1-150300.7.5.1",
            "ceph-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mds": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-argparse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mon": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rados-objclass-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-nbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-radosgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rgw": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libradospp-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librgw-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephadm": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-immutable-object-cache": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-mirror": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-modules-core": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rados": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librbd1": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "librados-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-common": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "python3-rbd": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs2": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-grafana-dashboards": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "cephfs-shell": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "rbd-fuse": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-diskprediction-local": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-test": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-base": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-prometheus-alerts": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "libcephfs-devel": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-rook": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-dashboard": "16.2.9.536+g41a9f9a5573-150300.6.3.1",
            "ceph-mgr-k8sevents": "16.2.9.536+g41a9f9a5573-150300.6.3.1"
        }
    ]
}