SUSE-SU-2022:4501-1

    Dashboard / Vulnerabilities / SUSE-SU-2022:4501-1

    SUSE-SU-2022:4501-1

    Published: 15 Dec 2022Last Modified: 4 Feb 2026
    Upstream:
    CVE-2021-3979
    Aliases:
    CVE-2021-3979

    Summary: Security update for ceph

    Details: This update for ceph fixes the following issues: ceph was updated to the Pacific release (16.2.9-536-g41a9f9a5573): + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979) + (bsc#1200064,) Remove last vestiges of docker.io image paths + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit + (jsc#SES-2515) High-availability NFS export + (bsc#1194875) [SES7P] include/buffer: include <memory> + cephadm: update image paths to registry.suse.com + cephadm: use snmp-notifier image from registry.suse.de + cephadm: infer the default container image during pull + mgr/cephadm: try to get FQDN for inventory address + (bsc#1194875) common: fix FTBFS due to dout & need_dynamic on GCC-12 + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade + Update Prometheus Container image paths (pr #459) + mgr/dashboard: Fix documentation URL (pr #456) + mgr/dashboard: Adapt downstream branded navigation page (pr #454) + Update prometheus-server version + (bsc#1194353) Downstream branding breaks dashboard npm build + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links

    References: https://www.suse.com/support/update/announcement/2022/suse-su-20224501-1/, https://bugzilla.suse.com/1178073, https://bugzilla.suse.com/1194131, https://bugzilla.suse.com/1194353, https://bugzilla.suse.com/1194875, https://bugzilla.suse.com/1195359, https://bugzilla.suse.com/1196044, https://bugzilla.suse.com/1196785, https://bugzilla.suse.com/1196938, https://bugzilla.suse.com/1200064, https://bugzilla.suse.com/1200553, https://www.suse.com/security/cve/CVE-2021-3979

    Affected packages

    Package

    Name: ceph

    Purl: pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -16.2.9.536+g41a9f9a5573-150300.6.3.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2022:4501-1 | CVE-DB