openSUSE Security Update: Security update for ceph
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2018:1470-1
Rating:             important
References:         #1051598 #1054061 #1056125 #1056967 #1059458 
                    #1060904 #1061461 #1063014 #1066182 #1066502 
                    #1067088 #1067119 #1067705 #1070357 #1071386 
                    #1074301 #1079076 #1080788 #1081379 #1081600 
                    #1086340 #1087269 #1087493 
Cross-References:   CVE-2017-16818 CVE-2018-7262
Affected Products:
                    openSUSE Leap 42.3
______________________________________________________________________________

   An update that solves two vulnerabilities and has 21 fixes
   is now available.

Description:

   This update for ceph fixes the following issues:

   Security issues fixed:

   - CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379).
   - CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014).

   Bug fixes:

   - bsc#1061461: OSDs keep generating coredumps after adding new OSD node to
     cluster.
   - bsc#1079076: RGW openssl fixes.
   - bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs
     aborts during start.
   - bsc#1056125: Some OSDs are down when doing performance testing on rbd
     image in EC Pool.
   - bsc#1087269: allow_ec_overwrites option not in command options list.
   - bsc#1051598: Fix mountpoint check for systemctl enable --runtime.
   - bsc#1070357: Zabbix mgr module doesn't recover from HEALTH_ERR.
   - bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs
     do not rejoin the cluster.
   - bsc#1067119: Crushtool decompile creates wrong device entries (device 20
     device20) for not existing / deleted OSDs.
   - bsc#1060904: Loglevel misleading during keystone authentication.
   - bsc#1056967: Monitors goes down after pool creation on cluster with 120
     OSDs.
   - bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH
     Ceph Storage 2.
   - bsc#1059458: Stopping / restarting rados gateway as part of deepsea
     stage.4 executions causes core-dump of radosgw.
   - bsc#1087493: Commvault cannot reconnect to storage after restarting
     haproxy.
   - bsc#1066182: Container synchronization between two Ceph clusters failed.
   - bsc#1081600: Crash in civetweb/RGW.
   - bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint
     on client.
   - bsc#1074301: OSDs keep aborting: SnapMapper failed asserts.
   - bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with
     journaling feature enabled.
   - bsc#1080788: fsid mismatch when creating additional OSDs.
   - bsc#1071386: Metadata spill onto block.slow.

   This update was imported from the SUSE:SLE-12-SP3:Update update project.


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 42.3:

      zypper in -t patch openSUSE-2018-541=1



Package List:

   - openSUSE Leap 42.3 (x86_64):

      ceph-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-base-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-base-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-common-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-common-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mds-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mds-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mgr-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mgr-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mon-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-mon-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-osd-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-osd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-radosgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-radosgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-resource-agents-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-test-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-test-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      ceph-test-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libcephfs-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libcephfs2-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libcephfs2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librados-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librados-devel-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librados2-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librados2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libradosstriper-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libradosstriper1-12.2.5+git.1524775272.5e7ea8cf03-9.1
      libradosstriper1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librbd-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librbd1-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librbd1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librgw-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librgw2-12.2.5+git.1524775272.5e7ea8cf03-9.1
      librgw2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-ceph-compat-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-ceph-argparse-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1
      python3-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rados-objclass-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-mirror-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-mirror-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-nbd-12.2.5+git.1524775272.5e7ea8cf03-9.1
      rbd-nbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1


References:

   https://www.suse.com/security/cve/CVE-2017-16818.html
   https://www.suse.com/security/cve/CVE-2018-7262.html
   https://bugzilla.suse.com/1051598
   https://bugzilla.suse.com/1054061
   https://bugzilla.suse.com/1056125
   https://bugzilla.suse.com/1056967
   https://bugzilla.suse.com/1059458
   https://bugzilla.suse.com/1060904
   https://bugzilla.suse.com/1061461
   https://bugzilla.suse.com/1063014
   https://bugzilla.suse.com/1066182
   https://bugzilla.suse.com/1066502
   https://bugzilla.suse.com/1067088
   https://bugzilla.suse.com/1067119
   https://bugzilla.suse.com/1067705
   https://bugzilla.suse.com/1070357
   https://bugzilla.suse.com/1071386
   https://bugzilla.suse.com/1074301
   https://bugzilla.suse.com/1079076
   https://bugzilla.suse.com/1080788
   https://bugzilla.suse.com/1081379
   https://bugzilla.suse.com/1081600
   https://bugzilla.suse.com/1086340
   https://bugzilla.suse.com/1087269
   https://bugzilla.suse.com/1087493

--

openSUSE: 2018:1470-1: important: ceph

May 30, 2018
An update that solves two vulnerabilities and has 21 fixes is now available.

Description

This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379). - CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014). Bug fixes: - bsc#1061461: OSDs keep generating coredumps after adding new OSD node to cluster. - bsc#1079076: RGW openssl fixes. - bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs aborts during start. - bsc#1056125: Some OSDs are down when doing performance testing on rbd image in EC Pool. - bsc#1087269: allow_ec_overwrites option not in command options list. - bsc#1051598: Fix mountpoint check for systemctl enable --runtime. - bsc#1070357: Zabbix mgr module doesn't recover from HEALTH_ERR. - bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs do not rejoin the cluster. - bsc#1067119: Crushtool decompile creates wrong device entries (device 20 device20) for not existing / deleted OSDs. - bsc#1060904: Loglevel misleading during keystone authentication. - bsc#1056967: Monitors goes down after pool creation on cluster with 120 OSDs. - bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH Ceph Storage 2. - bsc#1059458: Stopping / restarting rados gateway as part of deepsea stage.4 executions causes core-dump of radosgw. - bsc#1087493: Commvault cannot reconnect to storage after restarting haproxy. - bsc#1066182: Container synchronization between two Ceph clusters failed. - bsc#1081600: Crash in civetweb/RGW. - bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint on client. - bsc#1074301: OSDs keep aborting: SnapMapper failed asserts. - bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled. - bsc#1080788: fsid mismatch when creating additional OSDs. - bsc#1071386: Metadata spill onto block.slow. This update was imported from the SUSE:SLE-12-SP3:Update update project.

 

Patch

Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-541=1


Package List

- openSUSE Leap 42.3 (x86_64): ceph-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-base-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-common-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mds-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mgr-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-mon-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-osd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-radosgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-resource-agents-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 ceph-test-debugsource-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-12.2.5+git.1524775272.5e7ea8cf03-9.1 libcephfs2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados-devel-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librados2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-12.2.5+git.1524775272.5e7ea8cf03-9.1 libradosstriper1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-12.2.5+git.1524775272.5e7ea8cf03-9.1 librbd1-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-12.2.5+git.1524775272.5e7ea8cf03-9.1 librgw2-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-ceph-compat-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-ceph-argparse-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-cephfs-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rados-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-12.2.5+git.1524775272.5e7ea8cf03-9.1 python3-rgw-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rados-objclass-devel-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-fuse-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-mirror-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-12.2.5+git.1524775272.5e7ea8cf03-9.1 rbd-nbd-debuginfo-12.2.5+git.1524775272.5e7ea8cf03-9.1


References

https://www.suse.com/security/cve/CVE-2017-16818.html https://www.suse.com/security/cve/CVE-2018-7262.html https://bugzilla.suse.com/1051598 https://bugzilla.suse.com/1054061 https://bugzilla.suse.com/1056125 https://bugzilla.suse.com/1056967 https://bugzilla.suse.com/1059458 https://bugzilla.suse.com/1060904 https://bugzilla.suse.com/1061461 https://bugzilla.suse.com/1063014 https://bugzilla.suse.com/1066182 https://bugzilla.suse.com/1066502 https://bugzilla.suse.com/1067088 https://bugzilla.suse.com/1067119 https://bugzilla.suse.com/1067705 https://bugzilla.suse.com/1070357 https://bugzilla.suse.com/1071386 https://bugzilla.suse.com/1074301 https://bugzilla.suse.com/1079076 https://bugzilla.suse.com/1080788 https://bugzilla.suse.com/1081379 https://bugzilla.suse.com/1081600 https://bugzilla.suse.com/1086340 https://bugzilla.suse.com/1087269 https://bugzilla.suse.com/1087493--


Severity
Announcement ID: openSUSE-SU-2018:1470-1
Rating: important
Affected Products: openSUSE Leap 42.3 le.

Related News

19.Laptop Bed Esm H320
2 - 3 min read
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary
23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved