{"schemaVersion":3,"id":"SUSE-SU-2018:1417-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for ceph\n\nThis update for ceph fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-7262: rgw: malformed http headers can crash rgw (bsc#1081379).\n- CVE-2017-16818: User reachable asserts allow for DoS (bsc#1063014).\n\nBug fixes:\n\n- bsc#1061461: OSDs keep generating coredumps after adding new OSD node to cluster.\n- bsc#1079076: RGW openssl fixes.\n- bsc#1067088: Upgrade to SES5 restarted all nodes, majority of OSDs aborts during start.\n- bsc#1056125: Some OSDs are down when doing performance testing on rbd image in EC Pool.\n- bsc#1087269: allow_ec_overwrites option not in command options list.\n- bsc#1051598: Fix mountpoint check for systemctl enable --runtime.\n- bsc#1070357: Zabbix mgr module doesn't recover from HEALTH_ERR.\n- bsc#1066502: After upgrading a single OSD from SES 4 to SES 5 the OSDs do not rejoin the cluster.\n- bsc#1067119: Crushtool decompile creates wrong device entries (device 20 device20) for not existing / deleted OSDs.\n- bsc#1060904: Loglevel misleading during keystone authentication.\n- bsc#1056967: Monitors goes down after pool creation on cluster with 120 OSDs.\n- bsc#1067705: Issues with RGW Multi-Site Federation between SES5 and RH Ceph Storage 2.\n- bsc#1059458: Stopping / restarting rados gateway as part of deepsea stage.4 executions causes core-dump of radosgw.\n- bsc#1087493: Commvault cannot reconnect to storage after restarting haproxy.\n- bsc#1066182: Container synchronization between two Ceph clusters failed.\n- bsc#1081600: Crash in civetweb/RGW.\n- bsc#1054061: NFS-GANESHA service failing while trying to list mountpoint on client.\n- bsc#1074301: OSDs keep aborting: SnapMapper failed asserts.\n- bsc#1086340: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled.\n- bsc#1080788: fsid mismatch when creating additional OSDs.\n- bsc#1071386: Metadata spill onto block.slow.","dates":{"published":"2018-06-07T13:10:58.000Z","modified":"2026-02-04T02:17:55.013Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ceph&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"ceph","label":"ceph&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ceph&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"ceph","label":"Ceph","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"ceph&distro=SUSE Linux Enterprise Server 12 SP3","name":"ceph","label":"ceph&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ceph&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"ceph","label":"Ceph","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"ceph&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"ceph","label":"ceph&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ceph&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"ceph","label":"Ceph","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"ceph&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"ceph","label":"ceph&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ceph&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.5+git.1524775272.5e7ea8cf03-2.7.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"ceph","label":"Ceph","category":"server-app"}},"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181417-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20181417-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1051598","label":"bugzilla.suse.com/1051598","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1054061","label":"bugzilla.suse.com/1054061","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1056125","label":"bugzilla.suse.com/1056125","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1056967","label":"bugzilla.suse.com/1056967","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1059458","label":"bugzilla.suse.com/1059458","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1060904","label":"bugzilla.suse.com/1060904","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1061461","label":"bugzilla.suse.com/1061461","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1063014","label":"bugzilla.suse.com/1063014","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1066182","label":"bugzilla.suse.com/1066182","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1066502","label":"bugzilla.suse.com/1066502","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1067088","label":"bugzilla.suse.com/1067088","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1067119","label":"bugzilla.suse.com/1067119","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1067705","label":"bugzilla.suse.com/1067705","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1070357","label":"bugzilla.suse.com/1070357","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1071386","label":"bugzilla.suse.com/1071386","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1074301","label":"bugzilla.suse.com/1074301","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1079076","label":"bugzilla.suse.com/1079076","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1080788","label":"bugzilla.suse.com/1080788","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1081379","label":"bugzilla.suse.com/1081379","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1081600","label":"bugzilla.suse.com/1081600","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1086340","label":"bugzilla.suse.com/1086340","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1087269","label":"bugzilla.suse.com/1087269","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1087493","label":"bugzilla.suse.com/1087493","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16818","label":"www.suse.com/security/cve/CVE-2017-16818","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7262","label":"www.suse.com/security/cve/CVE-2018-7262","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-16818","CVE-2018-7262"],"downstream":[],"duplicates":[],"related":["CVE-2017-16818","CVE-2018-7262"]},"timeline":[{"kind":"published","date":"2018-06-07T13:10:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:17:55.013Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T11:18:51.615Z","stale":false,"partial":false}}