Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE: 2021:275-1 Moderate: Ceph Container Security Issue

suse
Calendar Grey July 31, 2021
Dist Suse Esm H88
This bulletin details a Red Hat Container Upgrade for kubernetes, featuring numerous fixes aimed at resolving vulnerabilities.
The container ses/7/ceph/ceph was updated

Summary

Advisory ID: SUSE-SU-2021:2404-1 Released: Tue Jul 20 14:21:30 2021 Summary: Security update for systemd Type: security Severity: moderate Advisory ID: SUSE-SU-2021:2439-1 Released: Wed Jul 21 13:46:48 2021 Summary: Security update for curl Type: security Severity: moderate Advisory ID: SUSE-RU-2021:2456-1 Released: Thu Jul 22 15:28:39 2021 Summary: Recommended update for pam-config Type: recommended

Topics%20covered

Topics Covered

security advisory moderate suse curl systemd ceph container update

References

References : 1144018 1184124 1184994 1187091 1188063 1188127 1188217 1188218

1188219 1188220 CVE-2020-15803 CVE-2021-22922 CVE-2021-22923

CVE-2021-22924 CVE-2021-22925 CVE-2021-27927 CVE-2021-33910

1184994,1188063,CVE-2021-33910

This update for systemd fixes the following issues:

- CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063)

- Skip udev rules if 'elevator=' is used (bsc#1184994)

1188217,1188218,1188219,1188220,CVE-2021-22922,CVE-2021-22923,CVE-2021-22924,CVE-2021-22925

This update for curl fixes the following issues:

- CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220)

- CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219)

Container Advisory ID : SUSE-CU-2021:275-1
Container Tags : ses/7/ceph/ceph:15.2.13.79 , ses/7/ceph/ceph:15.2.13.79.5.3 , ses/7/ceph/ceph:latest , ses/7/ceph/ceph:sle15.2.octopus
Container Release : 5.3
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate suse curl systemd ceph container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.