SUSE-SU-2016:2809-1

    Dashboard / Vulnerabilities / SUSE-SU-2016:2809-1

    SUSE-SU-2016:2809-1

    Published: 15 Nov 2016Last Modified: 4 Feb 2026
    Upstream:
    Aliases:

    Summary: Recommended update for ceph

    Details: This update provides Ceph 10.2.3, which includes important bug fixes in RBD mirroring, RGW multi-site, CephFS, and RADOS. Build/OPS: - AArch64: Detect crc32 extension support from assembler. (bsc#999688) - Drop legacy ceph RA which doesn't work with systemd unit files. - The mount.ceph binary, which is used to mount CephFS pools, was moved to the ceph-common package so it can be run from any client. - Accept bcache devices as data disks and fix partprobe intermittent issues during ceph-disk prepare. CephFS: - Several bug fixes for improved stability. RBD: - A number of fixes for RBD mirroring. - Several bug fixes for improved stability. RADOS: - CVE-2016-5009: moncommand with empty prefix crashes monitor. (bsc#987144) - Backports of many asyncmsgr fixes to jewel. - Several bug fixes for improved OSD stability. - Fix for a C++ symbol visibility issue in librados. RGW: - Fixes for number of issues related to syncing between remote sites. - A number of other bug fixes, including fixes for: + IPv6 + HTTPS/port 443 (bsc#990438) + radosgw-admin + Swift API + AWS4 API For a full list of issues fixed in this release, see: http://docs.ceph.com/docs/master/release-notes/#v10-2-3-jewel

    Affected packages

    Package

    Name: ceph

    Purl: pkg:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%203

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -10.2.3+git.1475228057.755cf99-7.3

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2016:2809-1 | CVE-DB