SUSE-SU-2016:2809-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-5009
Published: 15 Nov 2016, 17:11
Last modified:04 Feb 2026, 04:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Nov 2016, 17:11
Published
Vulnerability first disclosed
04 Feb 2026, 04:34
Last Modified
Vulnerability information updated

Description

Recommended update for ceph This update provides Ceph 10.2.3, which includes important bug fixes in RBD mirroring, RGW multi-site, CephFS, and RADOS. Build/OPS: - AArch64: Detect crc32 extension support from assembler. (bsc#999688) - Drop legacy ceph RA which doesn't work with systemd unit files. - The mount.ceph binary, which is used to mount CephFS pools, was moved to the ceph-common package so it can be run from any client. - Accept bcache devices as data disks and fix partprobe intermittent issues during ceph-disk prepare. CephFS: - Several bug fixes for improved stability. RBD: - A number of fixes for RBD mirroring. - Several bug fixes for improved stability. RADOS: - CVE-2016-5009: moncommand with empty prefix crashes monitor. (bsc#987144) - Backports of many asyncmsgr fixes to jewel. - Several bug fixes for improved OSD stability. - Fix for a C++ symbol visibility issue in librados. RGW: - Fixes for number of issues related to syncing between remote sites. - A number of other bug fixes, including fixes for: + IPv6 + HTTPS/port 443 (bsc#990438) + radosgw-admin + Swift API + AWS4 API For a full list of issues fixed in this release, see: http://docs.ceph.com/docs/master/release-notes/#v10-2-3-jewel

Affected Systems

  • suse•ceph&distro=SUSE Enterprise Storage 3

    < 10.2.3+git.1475228057.755cf99-7.3

References (10)