{"affected":[{"ecosystem_specific":{"binaries":[{"ceph":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-base":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-common":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-fuse":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-mds":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-mon":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-osd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-radosgw":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-test":"10.2.10+git.1510313171.6d5f0aeac1-13.7.2","libcephfs1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librados2":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","libradosstriper1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librbd1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librgw2":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-ceph-compat":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-cephfs":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-rados":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-rbd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-fuse":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-mirror":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-nbd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 3","name":"ceph","purl":"pkg:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%203"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"ceph":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-base":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-common":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-fuse":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-mds":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-mon":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-osd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-radosgw":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","ceph-test":"10.2.10+git.1510313171.6d5f0aeac1-13.7.2","libcephfs1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librados2":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","libradosstriper1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librbd1":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","librgw2":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-ceph-compat":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-cephfs":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-rados":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","python-rbd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-fuse":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-mirror":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3","rbd-nbd":"10.2.10+git.1510313171.6d5f0aeac1-13.7.3"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 3","name":"ceph-test","purl":"pkg:rpm/suse/ceph-test&distro=SUSE%20Enterprise%20Storage%203"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.2.10+git.1510313171.6d5f0aeac1-13.7.2"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update provides Ceph 10.2.10, which brings fixes and enhancements:\n\nThis security issue was fixed:\n\n- CVE-2017-7519: libradosstriper processes arbitrary printf placeholders in user input. (bsc#1043767)\n- CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. (bsc#1014986)\n\nThese non-security issues were fixed:\n\n- common: Add rdbmap to ceph-common. (bsc#1029482)\n- tools/rados: Default to include clone objects when executing 'cache-flush-evict-all'. (bsc#1003891)\n- mon, ceph-disk: Add lockbox permissions to bootstrap-osd. (bsc#1008435)\n- ceph_volume_client: Fix _recover_auth_meta() method. (bsc#1008501)\n- systemd/ceph-disk: Reduce ceph-disk flock contention. (bsc#1012100)\n- doc: Add verbiage to rbdmap manpage. (bsc#1015748)\n- doc: Add Install section to systemd rbdmap.service file. (bsc#1015748)\n- ceph systemd dependencies are wrong (bsc#1042973)\n- ceph-disk omits '--runtime' when enabling ceph-osd units (was: ERROR: unable to open OSD superblock) (bsc#1051598)\n- SES4: 23 osd's are down after patching node. (bsc#1056536)\n- Invalid error code returned by MDS is causing a kernel client WARNING (bsc#1028109)\n- systemctl stop rbdmap unmaps ALL rbds and not just the ones in /etc/ceph/rbdmap (bsc#1024691)\n- documentation: man crushtool does not cover the '--show-mappings' parameter (bsc#1033786)\n- swift | This returns with HTTP/1.1 401 Unauthorized (bsc#1015371)\n- OSDs fail to start after server reboot (bsc#1025643)\n- 'ceph-deploy mds destroy' not implemented (bsc#970642)\n","id":"SUSE-SU-2017:3171-1","modified":"2017-12-01T10:31:17Z","published":"2017-12-01T10:31:17Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173171-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1003891"},{"type":"REPORT","url":"https://bugzilla.suse.com/1008435"},{"type":"REPORT","url":"https://bugzilla.suse.com/1008501"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012100"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014986"},{"type":"REPORT","url":"https://bugzilla.suse.com/1015371"},{"type":"REPORT","url":"https://bugzilla.suse.com/1015748"},{"type":"REPORT","url":"https://bugzilla.suse.com/1024691"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025643"},{"type":"REPORT","url":"https://bugzilla.suse.com/1028109"},{"type":"REPORT","url":"https://bugzilla.suse.com/1029482"},{"type":"REPORT","url":"https://bugzilla.suse.com/1033786"},{"type":"REPORT","url":"https://bugzilla.suse.com/1042973"},{"type":"REPORT","url":"https://bugzilla.suse.com/1043767"},{"type":"REPORT","url":"https://bugzilla.suse.com/1051598"},{"type":"REPORT","url":"https://bugzilla.suse.com/1056536"},{"type":"REPORT","url":"https://bugzilla.suse.com/970642"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9579"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-7519"}],"related":["CVE-2016-9579","CVE-2017-7519"],"summary":"Security update for ceph","upstream":["CVE-2016-9579","CVE-2017-7519"]}