Oval Definition:	oval:org.opensuse.security:def:5673
Revision Date: 2021-05-04 Version: 1 Title: Security update for ceph (Important) Description: This update for ceph fixes the following issues: - ceph was updated to 14.2.20-402-g6aa76c6815: * CVE-2021-20288: Fixed unauthorized global_id reuse (bsc#1183074). * CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905). * CVE-2020-27839: Use secure cookies to store JWT Token (bsc#1179997). * mgr/dashboard: prometheus alerting: add some leeway for package drops and errors (bsc#1145463) * mon: have 'mon stat' output json as well (bsc#1174466) * rpm: ceph-mgr-dashboard recommends python3-saml on SUSE (bsc#1177200) * mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled (bsc#1178235) * rgw: cls/user: set from_index for reset stats calls (bsc#1178837) * mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860) * bluestore: provide a different name for fallback allocator (bsc#1180118) * test/run-cli-tests: use cram from github (bsc#1181378) * mgr/dashboard: fix 'Python2 Cookie module import fails on Python3' (bsc#1183487) * common: make ms_bind_msgr2 default to 'false' (bsc#1180594) Family: unix Class: patch Status: Reference(s): 1145463 1168630 1168874 1174230 1174466 1176384 1176756 1176899 1177200 1177977 1178235 1178837 1178860 1178905 1179997 1180118 1180594 1181378 1183074 1183487 CVE-2008-0928 CVE-2008-1945 CVE-2008-2382 CVE-2008-4539 CVE-2009-3736 CVE-2010-0624 CVE-2010-2947 CVE-2011-0460 CVE-2012-3515 CVE-2012-4510 CVE-2013-1987 CVE-2013-1988 CVE-2013-4148 CVE-2013-4149 CVE-2013-4150 CVE-2013-4151 CVE-2013-4526 CVE-2013-4527 CVE-2013-4529 CVE-2013-4530 CVE-2013-4531 CVE-2013-4533 CVE-2013-4534 CVE-2013-4535 CVE-2013-4536 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2013-4541 CVE-2013-4542 CVE-2013-4544 CVE-2013-6399 CVE-2014-0107 CVE-2014-0142 CVE-2014-0143 CVE-2014-0144 CVE-2014-0145 CVE-2014-0146 CVE-2014-0147 CVE-2014-0150 CVE-2014-0182 CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-3970 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-3456 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5276 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-3712 CVE-2016-4002 CVE-2016-4020 CVE-2016-4439 CVE-2016-4441 CVE-2016-4453 CVE-2016-4454 CVE-2016-4952 CVE-2016-4964 CVE-2016-5105 CVE-2016-5106 CVE-2016-5107 CVE-2016-5126 CVE-2016-5238 CVE-2016-5337 CVE-2016-5338 CVE-2016-5403 CVE-2016-5759 CVE-2016-6351 CVE-2016-6490 CVE-2016-6833 CVE-2016-6836 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7156 CVE-2016-7157 CVE-2017-5838 CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678 CVE-2020-15683 CVE-2020-15969 CVE-2020-25678 CVE-2020-27839 CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 CVE-2021-20288 SUSE-SU-2020:1027-1 SUSE-SU-2020:3091-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-setuptools-1.1.7-7.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND kbd-1.15.5-8.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cups-pk-helper-0.2.5-5 is installed OR cups-pk-helper-lang-0.2.5-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information augeas-1.2.0-17.3 is installed OR augeas-lenses-1.2.0-17.3 is installed OR libaugeas0-1.2.0-17.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND sudo-1.8.10p3-2.16.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND python-PyYAML-3.10-15 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information libpcreposix0-8.39-7 is installed OR pcre-8.39-7 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information augeas-1.10.1-2 is installed OR augeas-lenses-1.10.1-2 is installed OR libaugeas0-1.10.1-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND syslog-ng-3.4.5-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9 is installed OR gcc5-5.3.1+r233831-9 is installed OR gcc5-c++-5.3.1+r233831-9 is installed OR gcc5-fortran-5.3.1+r233831-9 is installed OR gcc5-info-5.3.1+r233831-9 is installed OR gcc5-locale-5.3.1+r233831-9 is installed OR libffi-devel-gcc5-5.3.1+r233831-9 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-96 is installed OR php5-5.5.14-96 is installed OR php5-bcmath-5.5.14-96 is installed OR php5-bz2-5.5.14-96 is installed OR php5-calendar-5.5.14-96 is installed OR php5-ctype-5.5.14-96 is installed OR php5-curl-5.5.14-96 is installed OR php5-dba-5.5.14-96 is installed OR php5-dom-5.5.14-96 is installed OR php5-enchant-5.5.14-96 is installed OR php5-exif-5.5.14-96 is installed OR php5-fastcgi-5.5.14-96 is installed OR php5-fileinfo-5.5.14-96 is installed OR php5-fpm-5.5.14-96 is installed OR php5-ftp-5.5.14-96 is installed OR php5-gd-5.5.14-96 is installed OR php5-gettext-5.5.14-96 is installed OR php5-gmp-5.5.14-96 is installed OR php5-iconv-5.5.14-96 is installed OR php5-imap-5.5.14-96 is installed OR php5-intl-5.5.14-96 is installed OR php5-json-5.5.14-96 is installed OR php5-ldap-5.5.14-96 is installed OR php5-mbstring-5.5.14-96 is installed OR php5-mcrypt-5.5.14-96 is installed OR php5-mysql-5.5.14-96 is installed OR php5-odbc-5.5.14-96 is installed OR php5-opcache-5.5.14-96 is installed OR php5-openssl-5.5.14-96 is installed OR php5-pcntl-5.5.14-96 is installed OR php5-pdo-5.5.14-96 is installed OR php5-pear-5.5.14-96 is installed OR php5-pgsql-5.5.14-96 is installed OR php5-phar-5.5.14-96 is installed OR php5-posix-5.5.14-96 is installed OR php5-pspell-5.5.14-96 is installed OR php5-shmop-5.5.14-96 is installed OR php5-snmp-5.5.14-96 is installed OR php5-soap-5.5.14-96 is installed OR php5-sockets-5.5.14-96 is installed OR php5-sqlite-5.5.14-96 is installed OR php5-suhosin-5.5.14-96 is installed OR php5-sysvmsg-5.5.14-96 is installed OR php5-sysvsem-5.5.14-96 is installed OR php5-sysvshm-5.5.14-96 is installed OR php5-tokenizer-5.5.14-96 is installed OR php5-wddx-5.5.14-96 is installed OR php5-xmlreader-5.5.14-96 is installed OR php5-xmlrpc-5.5.14-96 is installed OR php5-xmlwriter-5.5.14-96 is installed OR php5-xsl-5.5.14-96 is installed OR php5-zip-5.5.14-96 is installed OR php5-zlib-5.5.14-96 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2 is installed AND Package Information salt-2016.11.4-46.10 is installed OR salt-minion-2016.11.4-46.10 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND Package Information xen-4.7.5_02-43.30.1 is installed OR xen-doc-html-4.7.5_02-43.30.1 is installed OR xen-libs-4.7.5_02-43.30.1 is installed OR xen-libs-32bit-4.7.5_02-43.30.1 is installed OR xen-tools-4.7.5_02-43.30.1 is installed OR xen-tools-domU-4.7.5_02-43.30.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND Package Information brocade-bna-kmp-rt-2.1.0.0_2.6.33.20_rt31_0.5-0.2.52 is installed OR cluster-network-kmp-rt-1.4_2.6.33.20_rt31_0.5-2.5.62 is installed OR cluster-network-kmp-rt_trace-1.4_2.6.33.20_rt31_0.5-2.5.62 is installed OR drbd-kmp-rt-8.3.11_2.6.33.20_rt31_0.5-0.3.62 is installed OR drbd-kmp-rt_trace-8.3.11_2.6.33.20_rt31_0.5-0.3.62 is installed OR iscsitarget-kmp-rt-1.4.19_2.6.33.20_rt31_0.5-0.9.11.38 is installed OR kernel-rt-2.6.33.20-0.5.1 is installed OR kernel-rt-base-2.6.33.20-0.5.1 is installed OR kernel-rt-devel-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-base-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-devel-2.6.33.20-0.5.1 is installed OR kernel-source-rt-2.6.33.20-0.5.1 is installed OR kernel-syms-rt-2.6.33.20-0.5.1 is installed OR ocfs2-kmp-rt-1.6_2.6.33.20_rt31_0.5-0.4.2.62 is installed OR ocfs2-kmp-rt_trace-1.6_2.6.33.20_rt31_0.5-0.4.2.62 is installed OR ofed-kmp-rt-1.5.2_2.6.33.20_rt31_0.5-0.9.13.49 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.67-60.27.1 is installed OR kernel-compute-base-3.12.67-60.27.1 is installed OR kernel-compute-devel-3.12.67-60.27.1 is installed OR kernel-compute_debug-3.12.67-60.27.1 is installed OR kernel-compute_debug-devel-3.12.67-60.27.1 is installed OR kernel-devel-rt-3.12.67-60.27.1 is installed OR kernel-rt-3.12.67-60.27.1 is installed OR kernel-rt-base-3.12.67-60.27.1 is installed OR kernel-rt-devel-3.12.67-60.27.1 is installed OR kernel-rt_debug-3.12.67-60.27.1 is installed OR kernel-rt_debug-devel-3.12.67-60.27.1 is installed OR kernel-source-rt-3.12.67-60.27.1 is installed OR kernel-syms-rt-3.12.67-60.27.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND squid-2.7.STABLE5-2.4.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND libpoppler-glib4-0.12.3-1.8.1 is installed OR libpoppler-qt4-3-0.12.3-1.8.1 is installed OR libpoppler5-0.12.3-1.8.1 is installed OR poppler-tools-0.12.3-1.8.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND libpoppler-glib4-0.12.3-1.8.1 is installed OR libpoppler-qt4-3-0.12.3-1.8.1 is installed OR libpoppler5-0.12.3-1.8.1 is installed OR poppler-tools-0.12.3-1.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND aaa_base-11-6.65.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information xen-4.1.6_08-29.1 is installed OR xen-devel-4.1.6_08-29.1 is installed OR xen-doc-html-4.1.6_08-29.1 is installed OR xen-doc-pdf-4.1.6_08-29.1 is installed OR xen-kmp-default-4.1.6_08_3.0.101_0.7.40-29.1 is installed OR xen-kmp-pae-4.1.6_08_3.0.101_0.7.40-29.1 is installed OR xen-kmp-trace-4.1.6_08_3.0.101_0.7.40-29.1 is installed OR xen-libs-4.1.6_08-29.1 is installed OR xen-libs-32bit-4.1.6_08-29.1 is installed OR xen-tools-4.1.6_08-29.1 is installed OR xen-tools-domU-4.1.6_08-29.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information kdebase3-runtime-3.5.10-20.31 is installed OR kdebase3-runtime-32bit-3.5.10-20.31 is installed OR kdebase3-runtime-x86-3.5.10-20.31 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND a2ps-4.13-1326.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information libxml2-2.9.1-26.15.1 is installed OR libxml2-2-2.9.1-26.15.1 is installed OR libxml2-2-32bit-2.9.1-26.15.1 is installed OR libxml2-doc-2.9.1-26.15.1 is installed OR libxml2-tools-2.9.1-26.15.1 is installed OR python-libxml2-2.9.1-26.15.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information gtk2-data-2.24.31-7 is installed OR gtk2-lang-2.24.31-7 is installed OR gtk2-tools-2.24.31-7 is installed OR gtk2-tools-32bit-2.24.31-7 is installed OR libgtk-2_0-0-2.24.31-7 is installed OR libgtk-2_0-0-32bit-2.24.31-7 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information apache2-2.4.23-14 is installed OR apache2-doc-2.4.23-14 is installed OR apache2-example-pages-2.4.23-14 is installed OR apache2-prefork-2.4.23-14 is installed OR apache2-utils-2.4.23-14 is installed OR apache2-worker-2.4.23-14 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information dovecot22-2.2.31-19.11 is installed OR dovecot22-backend-mysql-2.2.31-19.11 is installed OR dovecot22-backend-pgsql-2.2.31-19.11 is installed OR dovecot22-backend-sqlite-2.2.31-19.11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information beagle-0.3.8-56.51.1 is installed OR beagle-devel-0.3.8-56.51.1 is installed OR beagle-lang-0.3.8-56.44.45.129 is installed OR mozilla-nspr-devel-4.9.5-0.3.2 is installed OR mozilla-nss-devel-3.14.2-0.4.3.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-devel-24.5.0esr-0.8.1 is installed OR mozilla-nspr-devel-4.10.4-0.3.1 is installed OR mozilla-nss-devel-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information xorg-x11-libXext-devel-7.4-1.18.2 is installed OR xorg-x11-libXext-devel-32bit-7.4-1.18.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND apache2-devel-2.4.10-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR ImageMagick-devel-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagick++-devel-6.8.8.1-8 is installed OR perl-PerlMagick-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND libXinerama-devel-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information libgstfft-1_0-0-32bit-1.8.3-12 is installed OR typelib-1_0-GstAudio-1_0-1.8.3-12 is installed OR typelib-1_0-GstPbutils-1_0-1.8.3-12 is installed OR typelib-1_0-GstTag-1_0-1.8.3-12 is installed OR typelib-1_0-GstVideo-1_0-1.8.3-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information colord-1.3.3-12 is installed OR colord-lang-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-68.7.0-3.77 is installed OR MozillaThunderbird-translations-common-68.7.0-3.77 is installed OR MozillaThunderbird-translations-other-68.7.0-3.77 is installed
BACK