SUSE-SU-2021:1108-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 08 Apr 2021, 09:48
Last modified:04 Feb 2026, 02:36

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Apr 2021, 09:48
Published
Vulnerability first disclosed
04 Feb 2026, 02:36
Last Modified
Vulnerability information updated

Description

Security update for ceph This update for ceph fixes the following issues: - ceph was updated to to 15.2.9 - cephadm: fix 'inspect' and 'pull' (bsc#1182766) - CVE-2020-27839: mgr/dashboard: Use secure cookies to store JWT Token (bsc#1179997) - CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905) - mgr/orchestrator: Sort 'ceph orch device ls' by host (bsc#1172926) - mgr/dashboard: enable different URL for users of browser to Grafana (bsc#1176390, bsc#1176679) - mgr/cephadm: lock multithreaded access to OSDRemovalQueue (bsc#1176489) - cephadm: command_unit: call systemctl with verbose=True (bsc#1176828) - cephadm: silence 'Failed to evict container' log msg (bsc#1177360) - mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails (bsc#1177857) - rgw: cls/user: set from_index for reset stats calls (bsc#1178837) - mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860) - cephadm: reference the last local image by digest (bsc#1178932, bsc#1179569)

Affected Systems

  • suse•ceph&distro=SUSE Enterprise Storage 7

    < 15.2.9.83+g4275378de0-3.17.1

  • suse•ceph&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2

    < 15.2.9.83+g4275378de0-3.17.1

References (17)