Security update for ceph SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1748-1 Final 1 1 2020-06-25T13:10:25Z current 2020-06-25T13:10:25Z 2020-06-25T13:10:25Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph This is a version update for ceph to version 12.2.13: Security issue fixed: - CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag (bsc#1171921). - Notable changes in this update for ceph: * mgr: telemetry: backported and now available on SES5.5. Please consider enabling via 'ceph telemetry on' (bsc#1171670) * OSD heartbeat ping time: new health warning, options and admin commands (bsc#1171960) * 'osd_calc_pg_upmaps_max_stddev' ceph.conf parameter has been removed; use 'upmap_max_deviation' instead (bsc#1171961) * Default maximum concurrent bluestore rocksdb compaction threads raised from 1 to 2 for improved ability to keep up with rgw bucket index workloads (bsc#1171963) - Bug fixes in this ceph update: * mon: Error message displayed when mon_osd_max_split_count would be exceeded is not as user-friendly as it could be (bsc#1126230) * ceph_volume_client: remove ceph mds calls in favor of ceph fs calls (bsc#1136082) * rgw: crypt: permit RGW-AUTO/default with SSE-S3 headers (bsc#1157607) * mon/AuthMonitor: don't validate fs caps on authorize (bsc#1161096) - Additional bug fixes: * ceph-volume: strip _dmcrypt suffix in simple scan json output (bsc#1162553) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2020-1748,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2020-1748,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2020-1748,SUSE-2020-1748,SUSE-OpenStack-Cloud-8-2020-1748,SUSE-OpenStack-Cloud-Crowbar-8-2020-1748,SUSE-SLE-SAP-12-SP3-2020-1748,SUSE-SLE-SDK-12-SP4-2020-1748,SUSE-SLE-SDK-12-SP5-2020-1748,SUSE-SLE-SERVER-12-SP3-2020-1748,SUSE-SLE-SERVER-12-SP3-BCL-2020-1748,SUSE-SLE-SERVER-12-SP4-2020-1748,SUSE-SLE-SERVER-12-SP5-2020-1748,SUSE-Storage-5-2020-1748 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201748-1/ Link for SUSE-SU-2020:1748-1 https://lists.suse.com/pipermail/sle-security-updates/2020-June/007029.html E-Mail link for SUSE-SU-2020:1748-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1126230 SUSE Bug 1126230 https://bugzilla.suse.com/1136082 SUSE Bug 1136082 https://bugzilla.suse.com/1157607 SUSE Bug 1157607 https://bugzilla.suse.com/1161096 SUSE Bug 1161096 https://bugzilla.suse.com/1162553 SUSE Bug 1162553 https://bugzilla.suse.com/1171670 SUSE Bug 1171670 https://bugzilla.suse.com/1171921 SUSE Bug 1171921 https://bugzilla.suse.com/1171960 SUSE Bug 1171960 https://bugzilla.suse.com/1171961 SUSE Bug 1171961 https://bugzilla.suse.com/1171963 SUSE Bug 1171963 https://www.suse.com/security/cve/CVE-2020-10753/ SUSE CVE CVE-2020-10753 page HPE Helion OpenStack 8 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-base-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-mds-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-mgr-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-mon-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-osd-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-qa-health-ok-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-radosgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-resource-agents-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-test-12.2.13+git.1592168685.85110a3e9d-2.50.1 libcephfs-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 librados-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 libradosstriper-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 librbd-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 librgw-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 python-ceph-compat-12.2.13+git.1592168685.85110a3e9d-2.50.1 python3-ceph-argparse-12.2.13+git.1592168685.85110a3e9d-2.50.1 python3-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 python3-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 python3-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 python3-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 rados-objclass-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 rbd-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 rbd-mirror-12.2.13+git.1592168685.85110a3e9d-2.50.1 rbd-nbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of HPE Helion OpenStack 8 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ceph-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-base-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-mds-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-mgr-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-mon-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-osd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-radosgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python-ceph-compat-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python3-ceph-argparse-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python3-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python3-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python3-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 python3-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 rbd-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 rbd-mirror-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 rbd-nbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Enterprise Storage 5 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP4 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libcephfs-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 librados-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 librbd-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libcephfs-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 librados-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 librbd-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud 8 ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 as a component of SUSE OpenStack Cloud Crowbar 8 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue. CVE-2020-10753 HPE Helion OpenStack 8:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 HPE Helion OpenStack 8:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-base-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-mds-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-mgr-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-mon-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-osd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:ceph-radosgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python-ceph-compat-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python3-ceph-argparse-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python3-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python3-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python3-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:python3-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:rbd-fuse-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:rbd-mirror-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Enterprise Storage 5:rbd-nbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-BCL:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP3-LTSS:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP4:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server 12 SP5:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libcephfs-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP4:librados-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP4:librbd-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libcephfs-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP5:librados-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE Linux Enterprise Software Development Kit 12 SP5:librbd-devel-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud 8:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:ceph-common-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:libcephfs2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:librados2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:libradosstriper1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:librbd1-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:librgw2-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:python-cephfs-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:python-rados-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:python-rbd-12.2.13+git.1592168685.85110a3e9d-2.50.1 SUSE OpenStack Cloud Crowbar 8:python-rgw-12.2.13+git.1592168685.85110a3e9d-2.50.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201748-1/ https://www.suse.com/security/cve/CVE-2020-10753.html CVE-2020-10753 https://bugzilla.suse.com/1171921 SUSE Bug 1171921