Security update for ceph SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2364-1 Final 1 1 2019-09-12T09:23:16Z current 2019-09-12T09:23:16Z 2019-09-12T09:23:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph This update for ceph to version 12.2.12-594-g02236657ca fixes the following issues: Security issues fixed: - CVE-2018-16889: Fixed missing sanitation of customer encryption keys from log output in v4 auth. (bsc#1121567) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-2364,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-2364,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-2364,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-2364,SUSE-2019-2364,SUSE-SLE-DESKTOP-12-SP4-2019-2364,SUSE-SLE-SDK-12-SP4-2019-2364,SUSE-SLE-SERVER-12-SP4-2019-2364,SUSE-Storage-5-2019-2364 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192364-1/ Link for SUSE-SU-2019:2364-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005910.html E-Mail link for SUSE-SU-2019:2364-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1121567 SUSE Bug 1121567 https://bugzilla.suse.com/1149961 SUSE Bug 1149961 https://www.suse.com/security/cve/CVE-2018-16889/ SUSE CVE CVE-2018-16889 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 5 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-base-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-mds-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-mgr-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-mon-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-osd-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-qa-health-ok-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-radosgw-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-resource-agents-12.2.12+git.1568024032.02236657ca-2.39.1 ceph-test-12.2.12+git.1568024032.02236657ca-2.39.1 libcephfs-devel-12.2.12+git.1568024032.02236657ca-2.39.1 libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 librados-devel-12.2.12+git.1568024032.02236657ca-2.39.1 libradosstriper-devel-12.2.12+git.1568024032.02236657ca-2.39.1 libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 librbd-devel-12.2.12+git.1568024032.02236657ca-2.39.1 librgw-devel-12.2.12+git.1568024032.02236657ca-2.39.1 librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 python-ceph-compat-12.2.12+git.1568024032.02236657ca-2.39.1 python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 python3-ceph-argparse-12.2.12+git.1568024032.02236657ca-2.39.1 python3-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 python3-rados-12.2.12+git.1568024032.02236657ca-2.39.1 python3-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 python3-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 rados-objclass-devel-12.2.12+git.1568024032.02236657ca-2.39.1 rbd-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 rbd-mirror-12.2.12+git.1568024032.02236657ca-2.39.1 rbd-nbd-12.2.12+git.1568024032.02236657ca-2.39.1 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ceph-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-base-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-mds-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-mgr-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-mon-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-osd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-radosgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python-ceph-compat-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python3-ceph-argparse-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python3-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python3-rados-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python3-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 python3-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 rbd-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 rbd-mirror-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 rbd-nbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Enterprise Storage 5 ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server 12 SP4 ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librados2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcephfs-devel-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 librados-devel-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 librbd-devel-12.2.12+git.1568024032.02236657ca-2.39.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable. CVE-2018-16889 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-base-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-mds-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-mgr-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-mon-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-osd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:ceph-radosgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python-ceph-compat-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python3-ceph-argparse-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python3-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python3-rados-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python3-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:python3-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:rbd-fuse-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:rbd-mirror-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Enterprise Storage 5:rbd-nbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Desktop 12 SP4:python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server 12 SP4:python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcephfs2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librados2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libradosstriper1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librbd1-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librgw2-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-cephfs-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rados-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rbd-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-rgw-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libcephfs-devel-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Software Development Kit 12 SP4:librados-devel-12.2.12+git.1568024032.02236657ca-2.39.1 SUSE Linux Enterprise Software Development Kit 12 SP4:librbd-devel-12.2.12+git.1568024032.02236657ca-2.39.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192364-1/ https://www.suse.com/security/cve/CVE-2018-16889.html CVE-2018-16889 https://bugzilla.suse.com/1121567 SUSE Bug 1121567