Oval Definition:oval:org.opensuse.security:def:56562
Revision Date:2020-12-01Version:1
Title:Security update for ceph (Important)
Description:

This update for ceph fixes the following issues:

- Update to version 12.2.7-420-gc0ef85b854: * https://ceph.com/releases/12-2-7-luminous-released/ * luminous: osd: eternal stuck PG in 'unfound_recovery' (bsc#1094932) * bluestore: db.slow used when db is not full (bsc#1092874)

* CVE-2018-10861: Ensure that ceph-mon does perform authorization on all OSD pool ops (bsc#1099162). * CVE-2018-1129: cephx signature check bypass (bsc#1096748). * CVE-2018-1128: cephx protocol was vulnerable to replay attack (bsc#1096748).


Family:unixClass:patch
Status:Reference(s):1042419
1046554
1046555
1054979
1058565
1058622
1058624
1064016
1065892
1092874
1094932
1096748
1097108
1099162
1099306
1099498
1104199
1104202
1111331
1115245
1117751
1117776
1118460
1118462
1118463
1123823
1123828
1123832
1125623
1125666
1129346
1130847
1131595
1133114
1133145
1135273
952062
954980
961642
961645
CVE-2011-0904
CVE-2011-0905
CVE-2011-1145
CVE-2011-1164
CVE-2012-0035
CVE-2014-3421
CVE-2014-3422
CVE-2014-3423
CVE-2014-3424
CVE-2015-8025
CVE-2015-8126
CVE-2016-0777
CVE-2016-0778
CVE-2017-12150
CVE-2017-12151
CVE-2017-12163
CVE-2017-3142
CVE-2017-3143
CVE-2018-10853
CVE-2018-10861
CVE-2018-10915
CVE-2018-10925
CVE-2018-1128
CVE-2018-1129
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-19636
CVE-2018-19637
CVE-2018-19638
CVE-2018-19639
CVE-2018-19640
CVE-2018-20748
CVE-2018-20749
CVE-2018-20750
CVE-2018-3646
CVE-2019-11091
CVE-2019-11365
CVE-2019-11366
CVE-2019-3886
CVE-2019-9636
CVE-2019-9948
SUSE-SU-2015:2053-2
SUSE-SU-2016:0027-1
SUSE-SU-2016:0118-1
SUSE-SU-2017:1736-1
SUSE-SU-2017:2971-1
SUSE-SU-2018:2358-1
SUSE-SU-2018:2478-1
SUSE-SU-2018:3377-1
SUSE-SU-2019:0313-1
SUSE-SU-2019:1091-1
SUSE-SU-2019:1122-1
SUSE-SU-2019:1438-1
SUSE-SU-2019:1439-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • libaudit1-2.8.1-lp150.3 is installed
  • OR libaudit1-32bit-2.8.1-lp150.3 is installed
  • OR libauparse0-2.8.1-lp150.3 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND ansible-2.8.1-12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • ceph-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR ceph-common-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR libcephfs2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR librados2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR libradosstriper1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR librbd1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR librgw2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR python-cephfs-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR python-rados-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR python-rbd-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
  • OR python-rgw-12.2.7+git.1531910353.c0ef85b854-2.12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • unixODBC-2.3.1-4 is installed
  • OR unixODBC-32bit-2.3.1-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_96-default-3-2 is installed
  • OR kgraft-patch-3_12_74-60_64_96-xen-3-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_29-3-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • emacs-24.3-16 is installed
  • OR emacs-el-24.3-16 is installed
  • OR emacs-info-24.3-16 is installed
  • OR emacs-nox-24.3-16 is installed
  • OR emacs-x11-24.3-16 is installed
  • OR etags-24.3-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • java-1_7_0-openjdk-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • libecpg6-10.5-1.3 is installed
  • OR libpq5-10.5-1.3 is installed
  • OR libpq5-32bit-10.5-1.3 is installed
  • OR postgresql-init-10-17.20 is installed
  • OR postgresql10-10.5-1.3 is installed
  • OR postgresql10-contrib-10.5-1.3 is installed
  • OR postgresql10-docs-10.5-1.3 is installed
  • OR postgresql10-libs-10.5-1.3 is installed
  • OR postgresql10-server-10.5-1.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libXRes1-1.0.7-3 is installed
  • OR libXRes1-32bit-1.0.7-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_176-94_88-default-4-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_24-4-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • gdk-pixbuf-loader-rsvg-2.40.21-5.9 is installed
  • OR librsvg-2.40.21-5.9 is installed
  • OR librsvg-2-2-2.40.21-5.9 is installed
  • OR librsvg-2-2-32bit-2.40.21-5.9 is installed
  • OR rsvg-view-2.40.21-5.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND apache2-mod_jk-1.2.40-5 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • bind-9.9.9P1-62 is installed
  • OR bind-chrootenv-9.9.9P1-62 is installed
  • OR bind-devel-9.9.9P1-62 is installed
  • OR bind-doc-9.9.9P1-62 is installed
  • OR bind-libs-9.9.9P1-62 is installed
  • OR bind-libs-32bit-9.9.9P1-62 is installed
  • OR bind-utils-9.9.9P1-62 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND atftp-0.7.0-160.8 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • MozillaFirefox-68.6.0-109.110 is installed
  • OR MozillaFirefox-translations-common-68.6.0-109.110 is installed
    • BACK