Security update for ceph SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0296-1 Final 1 1 2020-01-31T16:23:50Z current 2020-01-31T16:23:50Z 2020-01-31T16:23:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph This update for ceph fixes the following issues: - CVE-2020-1700: Fixed a denial of service against the RGW server via connection leakage (bsc#1161312). - CVE-2020-1699: Fixed a information disclosure by improper URL checking (bsc#1161074). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/hyperkube:v1.17.17-2020-296,SUSE-2020-296,SUSE-SLE-Module-Basesystem-15-SP1-2020-296,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-296,SUSE-Storage-6-2020-296 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200296-1/ Link for SUSE-SU-2020:0296-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006423.html E-Mail link for SUSE-SU-2020:0296-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1161074 SUSE Bug 1161074 https://bugzilla.suse.com/1161312 SUSE Bug 1161312 https://www.suse.com/security/cve/CVE-2020-1699/ SUSE CVE CVE-2020-1699 page https://www.suse.com/security/cve/CVE-2020-1700/ SUSE CVE CVE-2020-1700 page Container caasp/v4/hyperkube:v1.17.17 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 ceph-common-14.2.5.382+g8881d33957-3.30.1 libcephfs2-14.2.5.382+g8881d33957-3.30.1 librados2-14.2.5.382+g8881d33957-3.30.1 librbd1-14.2.5.382+g8881d33957-3.30.1 librgw2-14.2.5.382+g8881d33957-3.30.1 python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 python3-cephfs-14.2.5.382+g8881d33957-3.30.1 python3-rados-14.2.5.382+g8881d33957-3.30.1 python3-rbd-14.2.5.382+g8881d33957-3.30.1 python3-rgw-14.2.5.382+g8881d33957-3.30.1 ceph-14.2.5.382+g8881d33957-3.30.1 ceph-base-14.2.5.382+g8881d33957-3.30.1 ceph-dashboard-e2e-14.2.5.382+g8881d33957-3.30.1 ceph-fuse-14.2.5.382+g8881d33957-3.30.1 ceph-grafana-dashboards-14.2.5.382+g8881d33957-3.30.1 ceph-mds-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-dashboard-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-diskprediction-cloud-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-diskprediction-local-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-k8sevents-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-rook-14.2.5.382+g8881d33957-3.30.1 ceph-mgr-ssh-14.2.5.382+g8881d33957-3.30.1 ceph-mon-14.2.5.382+g8881d33957-3.30.1 ceph-osd-14.2.5.382+g8881d33957-3.30.1 ceph-prometheus-alerts-14.2.5.382+g8881d33957-3.30.1 ceph-radosgw-14.2.5.382+g8881d33957-3.30.1 ceph-test-14.2.5.382+g8881d33957-3.30.1 cephfs-shell-14.2.5.382+g8881d33957-3.30.1 libcephfs-devel-14.2.5.382+g8881d33957-3.30.1 librados-devel-14.2.5.382+g8881d33957-3.30.1 libradospp-devel-14.2.5.382+g8881d33957-3.30.1 librbd-devel-14.2.5.382+g8881d33957-3.30.1 librgw-devel-14.2.5.382+g8881d33957-3.30.1 rados-objclass-devel-14.2.5.382+g8881d33957-3.30.1 rbd-fuse-14.2.5.382+g8881d33957-3.30.1 rbd-mirror-14.2.5.382+g8881d33957-3.30.1 rbd-nbd-14.2.5.382+g8881d33957-3.30.1 ceph-common-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libcephfs2-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 librados2-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 librbd1-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 librgw2-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-cephfs-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rados-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rbd-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rgw-14.2.5.382+g8881d33957-3.30.1 as a component of Container caasp/v4/hyperkube:v1.17.17 ceph-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-base-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-common-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-fuse-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-grafana-dashboards-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mds-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mgr-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mgr-dashboard-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mgr-diskprediction-local-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mgr-rook-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-mon-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-osd-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-prometheus-alerts-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-radosgw-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 cephfs-shell-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 libcephfs2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 librados2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 librbd1-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 librgw2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 python3-cephfs-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 python3-rados-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 python3-rbd-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 python3-rgw-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 rbd-fuse-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 rbd-mirror-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 rbd-nbd-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Enterprise Storage 6 ceph-common-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcephfs-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcephfs2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librados-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librados2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libradospp-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librbd-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librbd1-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librgw-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librgw2-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-cephfs-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rados-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rbd-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rgw-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 rados-objclass-devel-14.2.5.382+g8881d33957-3.30.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard. CVE-2020-1699 Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-base-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-common-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-fuse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mds-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mon-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-osd-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-radosgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:cephfs-shell-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:libcephfs2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librados2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librbd1-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librgw2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rados-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rbd-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-fuse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-mirror-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-nbd-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.5.382+g8881d33957-3.30.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200296-1/ https://www.suse.com/security/cve/CVE-2020-1699.html CVE-2020-1699 https://bugzilla.suse.com/1161074 SUSE Bug 1161074 A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system. CVE-2020-1700 Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.5.382+g8881d33957-3.30.1 Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-base-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-common-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-fuse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mds-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-mon-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-osd-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:ceph-radosgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:cephfs-shell-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:libcephfs2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librados2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librbd1-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:librgw2-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rados-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rbd-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-fuse-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-mirror-14.2.5.382+g8881d33957-3.30.1 SUSE Enterprise Storage 6:rbd-nbd-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.5.382+g8881d33957-3.30.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.5.382+g8881d33957-3.30.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200296-1/ https://www.suse.com/security/cve/CVE-2020-1700.html CVE-2020-1700 https://bugzilla.suse.com/1161312 SUSE Bug 1161312