Security update for ceph
This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748) - CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748) - CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw Non-security issues fixed: - ceph-volume Python 3 fixes (bsc#1114567) - fix python3 module loading (bsc#1086613)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748) - CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748) - CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw Non-security issues fixed: - ceph-volume Python 3 fixes (bsc#1114567) - fix python3 module loading (bsc#1086613)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1084645
- https://bugzilla.suse.com/1086613
- https://bugzilla.suse.com/1096748
- https://bugzilla.suse.com/1099162
- https://bugzilla.suse.com/1101262
- https://bugzilla.suse.com/1111177
- https://bugzilla.suse.com/1114567
- https://www.suse.com/security/cve/CVE-2018-10861
- https://www.suse.com/security/cve/CVE-2018-1128
- https://www.suse.com/security/cve/CVE-2018-1129
- https://www.suse.com/security/cve/CVE-2018-14662
- https://www.suse.com/security/cve/CVE-2018-16846
- https://www.suse.com/support/update/announcement/2019/suse-su-20190586-1/