Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2023:798-1 Critical: Ceph Container Security Update

suse
Calendar Grey March 27, 2023
Scroller Suse
Urgent security enhancement for Ubuntu Kubernetes ceph tackles significant flaws in the recent updates for ucp/3.2/ceph.
The container ses/7.1/ceph/ceph was updated

Summary

Advisory ID: SUSE-RU-2023:714-1 Released: Mon Mar 13 10:53:25 2023 Summary: Recommended update for rpm Type: recommended Severity: important Advisory ID: SUSE-RU-2023:776-1 Released: Thu Mar 16 17:29:23 2023 Summary: Recommended update for gcc12 Type: recommended Severity: moderate Advisory ID: SUSE-RU-2023:786-1 Released: Thu Mar 16 19:36:09 2023

References

References : 1176785 1178233 1187748 1188911 1192838 1192840 1196046 1199183

1199282 1199756 1200262 1200317 1200501 1200978 1201604 1201797

1201837 1201976 1202077 1202292 1203248 1203249 1203355 1203375

1203715 1204430 1204548 1204956 1205025 1205436 1205570 1205636

1206158 1206949 1207294 1208471 CVE-2022-0670 CVE-2022-29217

CVE-2022-3650 CVE-2022-3854 CVE-2023-24329

1207294

This update for rpm fixes the following issues:

- Fix missing python(abi) for 3.XX versions (bsc#1207294)

This update for gcc12 fixes the following issues:

This update ships gcc12 also to the SUSE Linux Enterprise 15 SP1 LTSS and 15 SP2 LTSS products.

SUSE Linux Enterprise 15 SP3 and SP4 get only refreshed builds without changes

This update ship the GCC 12 compiler suite and its base libraries.

Severity
critical
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:798-1
Container Tags : ses/7.1/ceph/ceph:16.2.11.58 , ses/7.1/ceph/ceph:16.2.11.58.4.4.1 , ses/7.1/ceph/ceph:latest , ses/7.1/ceph/ceph:sle15.3.pacific
Container Release : 4.4.1
Severity : critical
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.