Security update for ceph SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:3201-1 Final 1 1 2016-12-20T16:25:32Z current 2016-12-20T16:25:32Z 2016-12-20T16:25:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph ceph was updated to version 10.2.4 and fixes the following issues: - A moncommand with empty prefix could crash the monitor (boo#987144, CVE-2016-5009) - Detect crc32 extension support from assembler on AArch64 (boo#999688) - Failing file operations on kernel based cephfs mount point could leave unaccessible file behind on hammer 0.94.7 (boo#985232) - Fixed boo#1008501 + ceph_volume_client: fix _recover_auth_meta() method + ceph_volume_client: check if volume metadata is empty + ceph_volume_client: fix partial auth recovery - Avoid ~100% CPU load after OSD creation / first OSD start (boo#1014338) - Fixed boo#990438: civetweb HTTPS support not working - Avoid systemd limiting OSDs (boo#1007216) - Fix 'make check' when building unit tests with --with-xio (boo#977940) - Fix build for ppc64le (boo#982141) - Including performance fix for linux dcache hash algorithm (boo#1005179) - Fix invalid command in SOC7 (boo#1008894) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2016-12/msg00126.html E-Mail link for openSUSE-SU-2016:3201-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.2 ceph-10.2.4+git.1481215985.12b091b-4.1 ceph-base-10.2.4+git.1481215985.12b091b-4.1 ceph-common-10.2.4+git.1481215985.12b091b-4.1 ceph-fuse-10.2.4+git.1481215985.12b091b-4.1 ceph-mds-10.2.4+git.1481215985.12b091b-4.1 ceph-mon-10.2.4+git.1481215985.12b091b-4.1 ceph-osd-10.2.4+git.1481215985.12b091b-4.1 ceph-radosgw-10.2.4+git.1481215985.12b091b-4.1 ceph-resource-agents-10.2.4+git.1481215985.12b091b-4.1 ceph-test-10.2.4+git.1481215985.12b091b-4.1 libcephfs-devel-10.2.4+git.1481215985.12b091b-4.1 libcephfs1-10.2.4+git.1481215985.12b091b-4.1 librados-devel-10.2.4+git.1481215985.12b091b-4.1 librados2-10.2.4+git.1481215985.12b091b-4.1 libradosstriper-devel-10.2.4+git.1481215985.12b091b-4.1 libradosstriper1-10.2.4+git.1481215985.12b091b-4.1 librbd-devel-10.2.4+git.1481215985.12b091b-4.1 librbd1-10.2.4+git.1481215985.12b091b-4.1 librgw-devel-10.2.4+git.1481215985.12b091b-4.1 librgw2-10.2.4+git.1481215985.12b091b-4.1 python-ceph-compat-10.2.4+git.1481215985.12b091b-4.1 python-cephfs-10.2.4+git.1481215985.12b091b-4.1 python-rados-10.2.4+git.1481215985.12b091b-4.1 python-rbd-10.2.4+git.1481215985.12b091b-4.1 rbd-fuse-10.2.4+git.1481215985.12b091b-4.1 rbd-mirror-10.2.4+git.1481215985.12b091b-4.1 rbd-nbd-10.2.4+git.1481215985.12b091b-4.1 ceph-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-base-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-common-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-fuse-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-mds-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-mon-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-osd-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-radosgw-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-resource-agents-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 ceph-test-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 libcephfs-devel-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 libcephfs1-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librados-devel-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librados2-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 libradosstriper-devel-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 libradosstriper1-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librbd-devel-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librbd1-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librgw-devel-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 librgw2-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 python-ceph-compat-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 python-cephfs-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 python-rados-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 python-rbd-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 rbd-fuse-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 rbd-mirror-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 rbd-nbd-10.2.4+git.1481215985.12b091b-4.1 as a component of openSUSE Leap 42.2 The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix. CVE-2016-5009 openSUSE Leap 42.2:ceph-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-base-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-common-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-fuse-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-mds-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-mon-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-osd-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-radosgw-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-resource-agents-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:ceph-test-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:libcephfs-devel-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:libcephfs1-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librados-devel-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librados2-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:libradosstriper-devel-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:libradosstriper1-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librbd-devel-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librbd1-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librgw-devel-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:librgw2-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:python-ceph-compat-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:python-cephfs-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:python-rados-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:python-rbd-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:rbd-fuse-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:rbd-mirror-10.2.4+git.1481215985.12b091b-4.1 openSUSE Leap 42.2:rbd-nbd-10.2.4+git.1481215985.12b091b-4.1 moderate 5.2 AV:A/AC:M/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-12/msg00126.html https://www.suse.com/security/cve/CVE-2016-5009.html CVE-2016-5009 https://bugzilla.suse.com/987144 SUSE Bug 987144