Security update for ceph SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0367-1 Final 1 1 2017-03-28T14:34:35Z current 2017-03-28T14:34:35Z 2017-03-28T14:34:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph This update for ceph fixes the following issues: * CVE-2016-5009: moncommand with empty prefix could crash monitor [bsc#987144] * Invalid commandd in SOC7 with ceph [bsc#1008894] * Performance fix was missing in SES4 [bsc#1005179] * ceph build problems on ppc64le [bsc#982141] * ceph make build unit test failure [bsc#977940] * ceph-deploy mon create-initial fails on one node [bsc#999688] * MDS dies while running xfstests [bsc#985232] * Typerror while calling _recover_auth_meta() [bsc#1008501] * OSD daemon uses ~100% CPU load right after OSD creation / first OSD start [bsc#1014338] * civetweb HTTPS support not working [bsc#990438] * systemd is killing off OSDs [bsc#1007216] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2017-186,SUSE-SLE-RPI-12-SP2-2017-186,SUSE-SLE-SDK-12-SP2-2017-186,SUSE-SLE-SERVER-12-SP2-2017-186 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170367-1/ Link for SUSE-SU-2017:0367-1 https://lists.suse.com/pipermail/sle-security-updates/2017-February/002616.html E-Mail link for SUSE-SU-2017:0367-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1005179 SUSE Bug 1005179 https://bugzilla.suse.com/1007216 SUSE Bug 1007216 https://bugzilla.suse.com/1008501 SUSE Bug 1008501 https://bugzilla.suse.com/1008894 SUSE Bug 1008894 https://bugzilla.suse.com/1014338 SUSE Bug 1014338 https://bugzilla.suse.com/977940 SUSE Bug 977940 https://bugzilla.suse.com/982141 SUSE Bug 982141 https://bugzilla.suse.com/985232 SUSE Bug 985232 https://bugzilla.suse.com/987144 SUSE Bug 987144 https://bugzilla.suse.com/990438 SUSE Bug 990438 https://bugzilla.suse.com/999688 SUSE Bug 999688 https://www.suse.com/security/cve/CVE-2016-5009/ SUSE CVE CVE-2016-5009 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 ceph-common-10.2.4+git.1481215985.12b091b-16.2 libcephfs1-10.2.4+git.1481215985.12b091b-16.2 librados2-10.2.4+git.1481215985.12b091b-16.2 libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 librbd1-10.2.4+git.1481215985.12b091b-16.2 python-cephfs-10.2.4+git.1481215985.12b091b-16.2 python-rados-10.2.4+git.1481215985.12b091b-16.2 python-rbd-10.2.4+git.1481215985.12b091b-16.2 libcephfs-devel-10.2.4+git.1481215985.12b091b-16.2 librados-devel-10.2.4+git.1481215985.12b091b-16.2 libradosstriper-devel-10.2.4+git.1481215985.12b091b-16.2 librbd-devel-10.2.4+git.1481215985.12b091b-16.2 ceph-common-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 libcephfs1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 librados2-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 librbd1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 python-cephfs-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 python-rados-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 python-rbd-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 ceph-common-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 libcephfs1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 librados2-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 librbd1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 python-cephfs-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 python-rados-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 python-rbd-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server 12 SP2 ceph-common-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libcephfs1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 librados2-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 librbd1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 python-cephfs-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 python-rados-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 python-rbd-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 ceph-common-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcephfs1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 librados2-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 librbd1-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-cephfs-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-rados-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-rbd-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcephfs-devel-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 librados-devel-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libradosstriper-devel-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 librbd-devel-10.2.4+git.1481215985.12b091b-16.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix. CVE-2016-5009 SUSE Linux Enterprise Desktop 12 SP2:ceph-common-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:libcephfs1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:librados2-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:librbd1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:python-cephfs-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:python-rados-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Desktop 12 SP2:python-rbd-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:ceph-common-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:libcephfs1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:librados2-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:librbd1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:python-cephfs-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:python-rados-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server 12 SP2:python-rbd-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ceph-common-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libcephfs1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:librados2-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:librbd1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-cephfs-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-rados-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:python-rbd-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:ceph-common-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcephfs1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:librados2-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libradosstriper1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:librbd1-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-cephfs-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-rados-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-rbd-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Software Development Kit 12 SP2:libcephfs-devel-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Software Development Kit 12 SP2:librados-devel-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Software Development Kit 12 SP2:libradosstriper-devel-10.2.4+git.1481215985.12b091b-16.2 SUSE Linux Enterprise Software Development Kit 12 SP2:librbd-devel-10.2.4+git.1481215985.12b091b-16.2 moderate 5.2 AV:A/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170367-1/ https://www.suse.com/security/cve/CVE-2016-5009.html CVE-2016-5009 https://bugzilla.suse.com/987144 SUSE Bug 987144