OPENSUSE-SU-2021:0544-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 12 Apr 2021, 04:05
Last modified:04 Feb 2026, 03:00

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Apr 2021, 04:05
Published
Vulnerability first disclosed
04 Feb 2026, 03:00
Last Modified
Vulnerability information updated

Description

Security update for ceph This update for ceph fixes the following issues: - ceph was updated to to 15.2.9 - cephadm: fix 'inspect' and 'pull' (bsc#1182766) - CVE-2020-27839: mgr/dashboard: Use secure cookies to store JWT Token (bsc#1179997) - CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905) - mgr/orchestrator: Sort 'ceph orch device ls' by host (bsc#1172926) - mgr/dashboard: enable different URL for users of browser to Grafana (bsc#1176390, bsc#1176679) - mgr/cephadm: lock multithreaded access to OSDRemovalQueue (bsc#1176489) - cephadm: command_unit: call systemctl with verbose=True (bsc#1176828) - cephadm: silence 'Failed to evict container' log msg (bsc#1177360) - mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails (bsc#1177857) - rgw: cls/user: set from_index for reset stats calls (bsc#1178837) - mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860) - cephadm: reference the last local image by digest (bsc#1178932, bsc#1179569) This update was imported from the SUSE:SLE-15-SP2:Update update project.

Affected Systems

  • opensuse•ceph-test&distro=openSUSE Leap 15.2

    < 15.2.9.83+g4275378de0-lp152.2.12.1

  • opensuse•ceph&distro=openSUSE Leap 15.2

    < 15.2.9.83+g4275378de0-lp152.2.12.1

References (17)