OPENSUSE-SU-2019:1284-1

Advisory lineage Upstream: 5 Downstream: 0
Published: 27 Apr 2019, 15:48
Last modified:04 Feb 2026, 02:16

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Apr 2019, 15:48
Published
Vulnerability first disclosed
04 Feb 2026, 02:16
Last Modified
Vulnerability information updated

Description

Security update for ceph This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748) - CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748) - CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710) Non-security issues fixed: - ceph-volume Python 3 fixes (bsc#1114567) - Fixed python3 module loading (bsc#1086613) - Fixed an issue where ceph build fails (bsc#1084645) - ceph's SPDK builds with march=native (bsc#1101262) This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•ceph-test&distro=openSUSE Leap 15.0

    < 13.2.4.125+gad802694f5-lp150.2.3.1

  • opensuse•ceph&distro=openSUSE Leap 15.0

    < 13.2.4.125+gad802694f5-lp150.2.3.1

References (14)