Oval Definition:oval:org.opensuse.security:def:66732
Revision Date:2021-04-08Version:1
Title:Security update for ceph (Moderate)
Description:

This update for ceph fixes the following issues:

- ceph was updated to to 15.2.9 - cephadm: fix 'inspect' and 'pull' (bsc#1182766) - CVE-2020-27839: mgr/dashboard: Use secure cookies to store JWT Token (bsc#1179997) - CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905) - mgr/orchestrator: Sort 'ceph orch device ls' by host (bsc#1172926) - mgr/dashboard: enable different URL for users of browser to Grafana (bsc#1176390, bsc#1176679) - mgr/cephadm: lock multithreaded access to OSDRemovalQueue (bsc#1176489) - cephadm: command_unit: call systemctl with verbose=True (bsc#1176828) - cephadm: silence 'Failed to evict container' log msg (bsc#1177360) - mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails (bsc#1177857) - rgw: cls/user: set from_index for reset stats calls (bsc#1178837) - mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860) - cephadm: reference the last local image by digest (bsc#1178932, bsc#1179569)
Family:unixClass:patch
Status:Reference(s):1172926
1176390
1176489
1176679
1176828
1177360
1177857
1178837
1178860
1178905
1178932
1179569
1179997
1182766
CVE-2017-10686
CVE-2017-11111
CVE-2017-14228
CVE-2017-17810
CVE-2017-17811
CVE-2017-17812
CVE-2017-17813
CVE-2017-17814
CVE-2017-17815
CVE-2017-17816
CVE-2017-17817
CVE-2017-17818
CVE-2017-17819
CVE-2017-17820
CVE-2018-10733
CVE-2020-25678
CVE-2020-27839
Platform(s):SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed
  • AND Package Information
  • libgxps-devel-0.3.0-4.3 is installed
  • OR libgxps2-0.3.0-4.3 is installed
  • OR typelib-1_0-GXPS-0_1-0.3.0-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND nasm-2.13.02-1 is installed
    • BACK