Security update for ceph, deepsea SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3257-1 Final 1 1 2020-11-20T11:14:55Z current 2020-11-20T11:14:55Z 2020-11-20T11:14:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph, deepsea This update for ceph, deepsea fixes the following issues: - Update to 14.2.13-398-gb6c514eec7: + Upstream 14.2.13 release see https://ceph.io/releases/v14-2-13-nautilus-released/ * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor - Update to 14.2.12-436-g6feab505b7: + Upstream 14.2.12 release see https://ceph.io/releases/v14-2-12-nautilus-released/ * (bsc#1169134) mgr/dashboard: document Prometheus' security model * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible + (bsc#1175781) ceph-volume: lvmcache: print help correctly + spec: move python-enum34 into rhel 7 conditional - Update to 14.2.11-394-g9cbbc473c0: + Upstream 14.2.11 release see https://ceph.io/releases/v14-2-11-nautilus-released/ * mgr/progress: Skip pg_summary update if _events dict is empty (bsc#1167477) (bsc#1172142) (bsc#1171956) * mgr/dashboard: Allow to edit iSCSI target with active session (bsc#1173339) - Update to 14.2.10-392-gb3a13b81cb: + Upstream 14.2.10 release see https://ceph.io/releases/v14-2-10-nautilus-released/ * mgr: Improve internal python to c++ interface (bsc#1167477) - Update to 14.2.9-970-ged84cae0c9: + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader (bsc#1171921, CVE-2020-10753) - Update to 14.2.9-969-g9917342dc8d: * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d * cmake: Improve test for 16-byte atomic support on IBM Z * (jsc#SES-680) monitoring: add details to Prometheus alerts * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down * (bsc#1159689) os/bluestore: more flexible DB volume space usage * (bsc#1156087) ceph-volume: make get_devices fs location independent * (bsc#1156409) monitoring: wait before firing osd full alert * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls * (bsc#1165713) mgr/dashboard: Repair broken grafana panels * (bsc#1165835) rgw: get barbican secret key request maybe return error code * (bsc#1165840) rgw: making implicit_tenants backwards compatible * (bsc#1166297) mgr/dashboard: Repair broken grafana panels * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation * (bsc#1166670) monitoring: root volume full alert fires false positives * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default - Update to 14.2.13-398-gb6c514eec7: + Upstream 14.2.13 release see https://ceph.io/releases/v14-2-13-nautilus-released/ * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor - Update to 14.2.12-436-g6feab505b7: + Upstream 14.2.12 release see https://ceph.io/releases/v14-2-12-nautilus-released/ * (bsc#1169134) mgr/dashboard: document Prometheus' security model * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible + (bsc#1175781) ceph-volume: lvmcache: print help correctly + spec: move python-enum34 into rhel 7 conditional - Update to 14.2.11-394-g9cbbc473c0: + Upstream 14.2.11 release see https://ceph.io/releases/v14-2-11-nautilus-released/ * mgr/progress: Skip pg_summary update if _events dict is empty (bsc#1167477) (bsc#1172142) (bsc#1171956) * mgr/dashboard: Allow to edit iSCSI target with active session (bsc#1173339) - Update to 14.2.10-392-gb3a13b81cb: + Upstream 14.2.10 release see https://ceph.io/releases/v14-2-10-nautilus-released/ * mgr: Improve internal python to c++ interface (bsc#1167477) - Update to 14.2.9-970-ged84cae0c9: + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader (bsc#1171921, CVE-2020-10753) - Update to 14.2.9-969-g9917342dc8d: * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d * cmake: Improve test for 16-byte atomic support on IBM Z * (jsc#SES-680) monitoring: add details to Prometheus alerts * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down * (bsc#1159689) os/bluestore: more flexible DB volume space usage * (bsc#1156087) ceph-volume: make get_devices fs location independent * (bsc#1156409) monitoring: wait before firing osd full alert * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls * (bsc#1165713) mgr/dashboard: Repair broken grafana panels * (bsc#1165835) rgw: get barbican secret key request maybe return error code * (bsc#1165840) rgw: making implicit_tenants backwards compatible * (bsc#1166297) mgr/dashboard: Repair broken grafana panels * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation * (bsc#1166670) monitoring: root volume full alert fires false positives * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default - Version: 0.9.33 - drop workarounds for old ceph-volume lvm batch command - runners/upgrade: Add SES6->7 pre-upgrade checks The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/6/cephcsi/cephcsi:latest-2020-3257,Container ses/6/rook/ceph:latest-2020-3257,SUSE-2020-3257,SUSE-Storage-6-2020-3257 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203257-1/ Link for SUSE-SU-2020:3257-1 https://lists.suse.com/pipermail/sle-security-updates/2020-November/007733.html E-Mail link for SUSE-SU-2020:3257-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1151612 SUSE Bug 1151612 https://bugzilla.suse.com/1152100 SUSE Bug 1152100 https://bugzilla.suse.com/1155045 SUSE Bug 1155045 https://bugzilla.suse.com/1155262 SUSE Bug 1155262 https://bugzilla.suse.com/1156087 SUSE Bug 1156087 https://bugzilla.suse.com/1156409 SUSE Bug 1156409 https://bugzilla.suse.com/1158257 SUSE Bug 1158257 https://bugzilla.suse.com/1159689 SUSE Bug 1159689 https://bugzilla.suse.com/1160626 SUSE Bug 1160626 https://bugzilla.suse.com/1161718 SUSE Bug 1161718 https://bugzilla.suse.com/1162553 SUSE Bug 1162553 https://bugzilla.suse.com/1163119 SUSE Bug 1163119 https://bugzilla.suse.com/1164571 SUSE Bug 1164571 https://bugzilla.suse.com/1165713 SUSE Bug 1165713 https://bugzilla.suse.com/1165835 SUSE Bug 1165835 https://bugzilla.suse.com/1165840 SUSE Bug 1165840 https://bugzilla.suse.com/1166297 SUSE Bug 1166297 https://bugzilla.suse.com/1166393 SUSE Bug 1166393 https://bugzilla.suse.com/1166624 SUSE Bug 1166624 https://bugzilla.suse.com/1166670 SUSE Bug 1166670 https://bugzilla.suse.com/1166932 SUSE Bug 1166932 https://bugzilla.suse.com/1167477 SUSE Bug 1167477 https://bugzilla.suse.com/1168403 SUSE Bug 1168403 https://bugzilla.suse.com/1169134 SUSE Bug 1169134 https://bugzilla.suse.com/1169356 SUSE Bug 1169356 https://bugzilla.suse.com/1170487 SUSE Bug 1170487 https://bugzilla.suse.com/1170938 SUSE Bug 1170938 https://bugzilla.suse.com/1171367 SUSE Bug 1171367 https://bugzilla.suse.com/1171921 SUSE Bug 1171921 https://bugzilla.suse.com/1171956 SUSE Bug 1171956 https://bugzilla.suse.com/1172142 SUSE Bug 1172142 https://bugzilla.suse.com/1173339 SUSE Bug 1173339 https://bugzilla.suse.com/1174591 SUSE Bug 1174591 https://bugzilla.suse.com/1175061 SUSE Bug 1175061 https://bugzilla.suse.com/1175240 SUSE Bug 1175240 https://bugzilla.suse.com/1175781 SUSE Bug 1175781 https://www.suse.com/security/cve/CVE-2020-10753/ SUSE CVE CVE-2020-10753 page Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest SUSE Enterprise Storage 6 ceph-14.2.13.398+gb6c514eec7-3.20.1 ceph-base-14.2.13.398+gb6c514eec7-3.20.1 ceph-common-14.2.13.398+gb6c514eec7-3.20.1 ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1 ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1 ceph-mds-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1 ceph-mon-14.2.13.398+gb6c514eec7-3.20.1 ceph-osd-14.2.13.398+gb6c514eec7-3.20.1 ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1 libcephfs2-14.2.13.398+gb6c514eec7-3.20.1 librados2-14.2.13.398+gb6c514eec7-3.20.1 librbd1-14.2.13.398+gb6c514eec7-3.20.1 librgw2-14.2.13.398+gb6c514eec7-3.20.1 python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1 python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1 python3-rados-14.2.13.398+gb6c514eec7-3.20.1 python3-rbd-14.2.13.398+gb6c514eec7-3.20.1 python3-rgw-14.2.13.398+gb6c514eec7-3.20.1 rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1 rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1 ceph-dashboard-e2e-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-diskprediction-cloud-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-k8sevents-14.2.13.398+gb6c514eec7-3.20.1 ceph-mgr-ssh-14.2.13.398+gb6c514eec7-3.20.1 ceph-prometheus-alerts-14.2.13.398+gb6c514eec7-3.20.1 cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1 deepsea-0.9.33+git.0.ed16d26e-3.27.1 deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1 deepsea-qa-0.9.33+git.0.ed16d26e-3.27.1 libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1 librados-devel-14.2.13.398+gb6c514eec7-3.20.1 libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1 librbd-devel-14.2.13.398+gb6c514eec7-3.20.1 librgw-devel-14.2.13.398+gb6c514eec7-3.20.1 rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1 rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1 ceph-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-base-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-common-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mds-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-mon-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-osd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest libcephfs2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest librados2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest librbd1-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest librgw2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-rados-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-rbd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-rgw-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/cephcsi/cephcsi:latest ceph-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-base-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-common-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mds-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-mon-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-osd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest libcephfs2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest librados2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest librbd1-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest librgw2-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest python3-rados-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest python3-rbd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest python3-rgw-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1 as a component of Container ses/6/rook/ceph:latest deepsea-0.9.33+git.0.ed16d26e-3.27.1 as a component of SUSE Enterprise Storage 6 deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1 as a component of SUSE Enterprise Storage 6 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue. CVE-2020-10753 Container ses/6/cephcsi/cephcsi:latest:ceph-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-base-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-common-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mds-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-mon-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-osd-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:libcephfs2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:librados2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:librbd1-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:librgw2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:python3-rados-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:python3-rbd-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:python3-rgw-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/cephcsi/cephcsi:latest:rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-base-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-common-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mds-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-mon-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-osd-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:libcephfs2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:librados2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:librbd1-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:librgw2-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:python3-rados-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:python3-rbd-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:python3-rgw-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1 Container ses/6/rook/ceph:latest:rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1 SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1 SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203257-1/ https://www.suse.com/security/cve/CVE-2020-10753.html CVE-2020-10753 https://bugzilla.suse.com/1171921 SUSE Bug 1171921