openSUSE-SU-2021:1834-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1834-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2021:1834-1
- Related
- Published
- 2021-07-10T19:13:08Z
- Modified
- 2021-07-10T19:13:08Z
- Summary
- Security update for ceph
- Details
-
This update for ceph fixes the following issues:
- Update to 15.2.12-83-g528da226523:
- (CVE-2021-3509) fix cookie injection issue (bsc#1186021)
- (CVE-2021-3531) RGWSwiftWebsiteHandler::iswebdir checks empty subdir_name (bsc#1186020)
- (CVE-2021-3524) sanitize \r in s3 CORSConfiguration’s ExposeHeader (bsc#1185619)
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OD76XLAQUNHRCX53LARPKA7IODR5MCPO/
- https://bugzilla.suse.com/1185619
- https://bugzilla.suse.com/1186020
- https://bugzilla.suse.com/1186021
- https://www.suse.com/security/cve/CVE-2021-3509
- https://www.suse.com/security/cve/CVE-2021-3524
- https://www.suse.com/security/cve/CVE-2021-3531
Affected packages
openSUSE:Leap 15.3 / ceph
Package
- Name
- ceph
- Purl
- pkg:rpm/opensuse/ceph&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed15.2.12.83+g528da226523-3.25.1
Ecosystem specific
{
"binaries": [
{
"python3-cephfs": "15.2.12.83+g528da226523-3.25.1",
"ceph-osd": "15.2.12.83+g528da226523-3.25.1",
"ceph-fuse": "15.2.12.83+g528da226523-3.25.1",
"librgw2": "15.2.12.83+g528da226523-3.25.1",
"python3-ceph-argparse": "15.2.12.83+g528da226523-3.25.1",
"ceph-mds": "15.2.12.83+g528da226523-3.25.1",
"librados2": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-cephadm": "15.2.12.83+g528da226523-3.25.1",
"ceph-mon": "15.2.12.83+g528da226523-3.25.1",
"rados-objclass-devel": "15.2.12.83+g528da226523-3.25.1",
"rbd-nbd": "15.2.12.83+g528da226523-3.25.1",
"ceph-radosgw": "15.2.12.83+g528da226523-3.25.1",
"python3-rgw": "15.2.12.83+g528da226523-3.25.1",
"libradospp-devel": "15.2.12.83+g528da226523-3.25.1",
"librbd-devel": "15.2.12.83+g528da226523-3.25.1",
"librgw-devel": "15.2.12.83+g528da226523-3.25.1",
"cephadm": "15.2.12.83+g528da226523-3.25.1",
"ceph-immutable-object-cache": "15.2.12.83+g528da226523-3.25.1",
"python3-ceph-common": "15.2.12.83+g528da226523-3.25.1",
"rbd-mirror": "15.2.12.83+g528da226523-3.25.1",
"ceph": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-diskprediction-cloud": "15.2.12.83+g528da226523-3.25.1",
"python3-rados": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-modules-core": "15.2.12.83+g528da226523-3.25.1",
"librbd1": "15.2.12.83+g528da226523-3.25.1",
"librados-devel": "15.2.12.83+g528da226523-3.25.1",
"ceph-common": "15.2.12.83+g528da226523-3.25.1",
"python3-rbd": "15.2.12.83+g528da226523-3.25.1",
"libcephfs2": "15.2.12.83+g528da226523-3.25.1",
"ceph-grafana-dashboards": "15.2.12.83+g528da226523-3.25.1",
"cephfs-shell": "15.2.12.83+g528da226523-3.25.1",
"rbd-fuse": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-diskprediction-local": "15.2.12.83+g528da226523-3.25.1",
"ceph-test": "15.2.12.83+g528da226523-3.25.1",
"ceph-base": "15.2.12.83+g528da226523-3.25.1",
"ceph-prometheus-alerts": "15.2.12.83+g528da226523-3.25.1",
"libcephfs-devel": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-rook": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-dashboard": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-k8sevents": "15.2.12.83+g528da226523-3.25.1"
}
]
}
openSUSE:Leap 15.3 / ceph-test
Package
- Name
- ceph-test
- Purl
- pkg:rpm/opensuse/ceph-test&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed15.2.12.83+g528da226523-3.25.1
Ecosystem specific
{
"binaries": [
{
"python3-cephfs": "15.2.12.83+g528da226523-3.25.1",
"ceph-osd": "15.2.12.83+g528da226523-3.25.1",
"ceph-fuse": "15.2.12.83+g528da226523-3.25.1",
"librgw2": "15.2.12.83+g528da226523-3.25.1",
"python3-ceph-argparse": "15.2.12.83+g528da226523-3.25.1",
"ceph-mds": "15.2.12.83+g528da226523-3.25.1",
"librados2": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-cephadm": "15.2.12.83+g528da226523-3.25.1",
"ceph-mon": "15.2.12.83+g528da226523-3.25.1",
"rados-objclass-devel": "15.2.12.83+g528da226523-3.25.1",
"rbd-nbd": "15.2.12.83+g528da226523-3.25.1",
"ceph-radosgw": "15.2.12.83+g528da226523-3.25.1",
"python3-rgw": "15.2.12.83+g528da226523-3.25.1",
"libradospp-devel": "15.2.12.83+g528da226523-3.25.1",
"librbd-devel": "15.2.12.83+g528da226523-3.25.1",
"librgw-devel": "15.2.12.83+g528da226523-3.25.1",
"cephadm": "15.2.12.83+g528da226523-3.25.1",
"ceph-immutable-object-cache": "15.2.12.83+g528da226523-3.25.1",
"python3-ceph-common": "15.2.12.83+g528da226523-3.25.1",
"rbd-mirror": "15.2.12.83+g528da226523-3.25.1",
"ceph": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-diskprediction-cloud": "15.2.12.83+g528da226523-3.25.1",
"python3-rados": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-modules-core": "15.2.12.83+g528da226523-3.25.1",
"librbd1": "15.2.12.83+g528da226523-3.25.1",
"librados-devel": "15.2.12.83+g528da226523-3.25.1",
"ceph-common": "15.2.12.83+g528da226523-3.25.1",
"python3-rbd": "15.2.12.83+g528da226523-3.25.1",
"libcephfs2": "15.2.12.83+g528da226523-3.25.1",
"ceph-grafana-dashboards": "15.2.12.83+g528da226523-3.25.1",
"cephfs-shell": "15.2.12.83+g528da226523-3.25.1",
"rbd-fuse": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-diskprediction-local": "15.2.12.83+g528da226523-3.25.1",
"ceph-test": "15.2.12.83+g528da226523-3.25.1",
"ceph-base": "15.2.12.83+g528da226523-3.25.1",
"ceph-prometheus-alerts": "15.2.12.83+g528da226523-3.25.1",
"libcephfs-devel": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-rook": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-dashboard": "15.2.12.83+g528da226523-3.25.1",
"ceph-mgr-k8sevents": "15.2.12.83+g528da226523-3.25.1"
}
]
}