{"affected":[{"ecosystem_specific":{"binaries":[{"ceph":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-base":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-common":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-fuse":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-mds":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-mon":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-osd":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-radosgw":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-test":"10.2.10+git.1507616349.698469bd8d-12.6.1","libcephfs1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librados2":"10.2.10+git.1507616349.698469bd8d-12.6.1","libradosstriper1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librbd1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librgw2":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-ceph-compat":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-cephfs":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-rados":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-rbd":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-fuse":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-mirror":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-nbd":"10.2.10+git.1507616349.698469bd8d-12.6.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 4","name":"ceph","purl":"pkg:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.2.10+git.1507616349.698469bd8d-12.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"ceph":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-base":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-common":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-fuse":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-mds":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-mon":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-osd":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-radosgw":"10.2.10+git.1507616349.698469bd8d-12.6.1","ceph-test":"10.2.10+git.1507616349.698469bd8d-12.6.1","libcephfs1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librados2":"10.2.10+git.1507616349.698469bd8d-12.6.1","libradosstriper1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librbd1":"10.2.10+git.1507616349.698469bd8d-12.6.1","librgw2":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-ceph-compat":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-cephfs":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-rados":"10.2.10+git.1507616349.698469bd8d-12.6.1","python-rbd":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-fuse":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-mirror":"10.2.10+git.1507616349.698469bd8d-12.6.1","rbd-nbd":"10.2.10+git.1507616349.698469bd8d-12.6.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 4","name":"ceph-test","purl":"pkg:rpm/suse/ceph-test&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.2.10+git.1507616349.698469bd8d-12.6.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"CEPH was updated to version 10.2.10, which brings several fixes and enhancements.\n\nUpstream 10.2.10 release summary can be found at: https://ceph.com/releases/v10-2-10-jewel-released/\n\nSecurity issues fixed:\n\n- CVE-2017-7519: libradosstriper processed arbitrary printf placeholders in user input (bsc#1043767)\n\nNon-security issues fixed:\n\n- Add explicit Before=ceph.target to systemd service file. (bsc#1042973)\n- ceph-disk omits '--runtime' when enabling ceph-osd@$ID.service units. (bsc#1051598, bsc#1056536)\n- Make it possible to customize ceph-disk's timeout and set default to 3h. (bsc#1051432)\n- Move ceph-disk from ceph-common to ceph-base.\n","id":"SUSE-SU-2017:2922-1","modified":"2017-11-02T12:09:07Z","published":"2017-11-02T12:09:07Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172922-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1042973"},{"type":"REPORT","url":"https://bugzilla.suse.com/1043767"},{"type":"REPORT","url":"https://bugzilla.suse.com/1051432"},{"type":"REPORT","url":"https://bugzilla.suse.com/1051598"},{"type":"REPORT","url":"https://bugzilla.suse.com/1056536"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-7519"}],"related":["CVE-2017-7519"],"summary":"Security update for ceph","upstream":["CVE-2017-7519"]}