Oval Definition:oval:org.opensuse.security:def:104437
Revision Date:2019-08-05Version:1
Title:Security update for ceph (Important)
Description:

This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2019-3821: civetweb: fix file descriptor leak (bsc#1125080) - CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567)

Non-security issues fixed:

- install grafana dashboards world readable (bsc#1136110) - upgrade results in cluster outage (bsc#1132396) - ceph status reports 'HEALTH_WARN 3 monitors have not enabled msgr2' (bsc#1124957) - Dashboard: Opening tcmu-runner perf counters results in a 404 (bsc#1135388) - RadosGW stopped expiring objects (bsc#1133139) - Ceph does not recover when rebuilding every OSD (bsc#1133461)
Family:unixClass:patch
Status:Reference(s):1121567
1123360
1124957
1125080
1125899
1131984
1132396
1133139
1133461
1135030
1135219
1135221
1135388
1136110
CVE-2018-16889
CVE-2019-3821
SUSE-SU-2019:2049-1
Platform(s):SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
BACK