SUSE-SU-2017:0367-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-5009
Published: 28 Mar 2017, 14:34
Last modified:04 Feb 2026, 03:08

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Mar 2017, 14:34
Published
Vulnerability first disclosed
04 Feb 2026, 03:08
Last Modified
Vulnerability information updated

Description

Security update for ceph This update for ceph fixes the following issues: * CVE-2016-5009: moncommand with empty prefix could crash monitor [bsc#987144] * Invalid commandd in SOC7 with ceph [bsc#1008894] * Performance fix was missing in SES4 [bsc#1005179] * ceph build problems on ppc64le [bsc#982141] * ceph make build unit test failure [bsc#977940] * ceph-deploy mon create-initial fails on one node [bsc#999688] * MDS dies while running xfstests [bsc#985232] * Typerror while calling _recover_auth_meta() [bsc#1008501] * OSD daemon uses ~100% CPU load right after OSD creation / first OSD start [bsc#1014338] * civetweb HTTPS support not working [bsc#990438] * systemd is killing off OSDs [bsc#1007216]

Affected Systems

  • suse•ceph&distro=SUSE Linux Enterprise Desktop 12 SP2

    < 10.2.4+git.1481215985.12b091b-16.2

  • suse•ceph&distro=SUSE Linux Enterprise Server 12 SP2

    < 10.2.4+git.1481215985.12b091b-16.2

  • suse•ceph&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

    < 10.2.4+git.1481215985.12b091b-16.2

  • suse•ceph&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2

    < 10.2.4+git.1481215985.12b091b-16.2

  • suse•ceph&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 10.2.4+git.1481215985.12b091b-16.2

References (13)