{"affected":[{"ecosystem_specific":{"binaries":[{"ceph-common":"14.2.1.468+g994fd9e0cc-3.3.2","libcephfs-devel":"14.2.1.468+g994fd9e0cc-3.3.2","libcephfs2":"14.2.1.468+g994fd9e0cc-3.3.2","librados-devel":"14.2.1.468+g994fd9e0cc-3.3.2","librados2":"14.2.1.468+g994fd9e0cc-3.3.2","libradospp-devel":"14.2.1.468+g994fd9e0cc-3.3.2","librbd-devel":"14.2.1.468+g994fd9e0cc-3.3.2","librbd1":"14.2.1.468+g994fd9e0cc-3.3.2","librgw-devel":"14.2.1.468+g994fd9e0cc-3.3.2","librgw2":"14.2.1.468+g994fd9e0cc-3.3.2","python3-ceph-argparse":"14.2.1.468+g994fd9e0cc-3.3.2","python3-cephfs":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rados":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rbd":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rgw":"14.2.1.468+g994fd9e0cc-3.3.2","rados-objclass-devel":"14.2.1.468+g994fd9e0cc-3.3.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","name":"ceph","purl":"pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.2.1.468+g994fd9e0cc-3.3.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"ceph":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-base":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-common":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-fuse":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-grafana-dashboards":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mds":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mgr":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mgr-dashboard":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mgr-diskprediction-local":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mgr-rook":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-mon":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-osd":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-prometheus-alerts":"14.2.1.468+g994fd9e0cc-3.3.2","ceph-radosgw":"14.2.1.468+g994fd9e0cc-3.3.2","cephfs-shell":"14.2.1.468+g994fd9e0cc-3.3.2","libcephfs2":"14.2.1.468+g994fd9e0cc-3.3.2","librados2":"14.2.1.468+g994fd9e0cc-3.3.2","librbd1":"14.2.1.468+g994fd9e0cc-3.3.2","librgw2":"14.2.1.468+g994fd9e0cc-3.3.2","python3-ceph-argparse":"14.2.1.468+g994fd9e0cc-3.3.2","python3-cephfs":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rados":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rbd":"14.2.1.468+g994fd9e0cc-3.3.2","python3-rgw":"14.2.1.468+g994fd9e0cc-3.3.2","rbd-fuse":"14.2.1.468+g994fd9e0cc-3.3.2","rbd-mirror":"14.2.1.468+g994fd9e0cc-3.3.2","rbd-nbd":"14.2.1.468+g994fd9e0cc-3.3.2"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 6","name":"ceph","purl":"pkg:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%206"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.2.1.468+g994fd9e0cc-3.3.2"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for ceph fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-3821: civetweb: fix file descriptor leak (bsc#1125080)\n- CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567)\n\nNon-security issues fixed:\n\n- install grafana dashboards world readable (bsc#1136110)\n- upgrade results in cluster outage (bsc#1132396)\n- ceph status reports 'HEALTH_WARN 3 monitors have not enabled msgr2' (bsc#1124957)\n-  Dashboard: Opening tcmu-runner perf counters results in a 404 (bsc#1135388)\n- RadosGW stopped expiring objects (bsc#1133139)\n- Ceph does not recover when rebuilding every OSD  (bsc#1133461)\n","id":"SUSE-SU-2019:2049-1","modified":"2019-08-05T15:56:32Z","published":"2019-08-05T15:56:32Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192049-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1121567"},{"type":"REPORT","url":"https://bugzilla.suse.com/1123360"},{"type":"REPORT","url":"https://bugzilla.suse.com/1124957"},{"type":"REPORT","url":"https://bugzilla.suse.com/1125080"},{"type":"REPORT","url":"https://bugzilla.suse.com/1125899"},{"type":"REPORT","url":"https://bugzilla.suse.com/1131984"},{"type":"REPORT","url":"https://bugzilla.suse.com/1132396"},{"type":"REPORT","url":"https://bugzilla.suse.com/1133139"},{"type":"REPORT","url":"https://bugzilla.suse.com/1133461"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135030"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135219"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135221"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135388"},{"type":"REPORT","url":"https://bugzilla.suse.com/1136110"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16889"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-3821"}],"related":["CVE-2018-16889","CVE-2019-3821"],"summary":"Security update for ceph","upstream":["CVE-2018-16889","CVE-2019-3821"]}