ceph-16.2.9.536+g41a9f9a5573-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:12195-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z ceph-16.2.9.536+g41a9f9a5573-1.1 on GA media These are all security issues fixed in the ceph-16.2.9.536+g41a9f9a5573-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-12195 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2021-3979/ SUSE CVE CVE-2021-3979 page openSUSE Tumbleweed ceph-16.2.9.536+g41a9f9a5573-1.1 ceph-base-16.2.9.536+g41a9f9a5573-1.1 ceph-common-16.2.9.536+g41a9f9a5573-1.1 ceph-fuse-16.2.9.536+g41a9f9a5573-1.1 ceph-grafana-dashboards-16.2.9.536+g41a9f9a5573-1.1 ceph-immutable-object-cache-16.2.9.536+g41a9f9a5573-1.1 ceph-mds-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-cephadm-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-dashboard-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-diskprediction-local-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-k8sevents-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-modules-core-16.2.9.536+g41a9f9a5573-1.1 ceph-mgr-rook-16.2.9.536+g41a9f9a5573-1.1 ceph-mon-16.2.9.536+g41a9f9a5573-1.1 ceph-osd-16.2.9.536+g41a9f9a5573-1.1 ceph-prometheus-alerts-16.2.9.536+g41a9f9a5573-1.1 ceph-radosgw-16.2.9.536+g41a9f9a5573-1.1 cephadm-16.2.9.536+g41a9f9a5573-1.1 cephfs-mirror-16.2.9.536+g41a9f9a5573-1.1 cephfs-shell-16.2.9.536+g41a9f9a5573-1.1 cephfs-top-16.2.9.536+g41a9f9a5573-1.1 libcephfs-devel-16.2.9.536+g41a9f9a5573-1.1 libcephfs2-16.2.9.536+g41a9f9a5573-1.1 libcephsqlite-16.2.9.536+g41a9f9a5573-1.1 libcephsqlite-devel-16.2.9.536+g41a9f9a5573-1.1 librados-devel-16.2.9.536+g41a9f9a5573-1.1 librados2-16.2.9.536+g41a9f9a5573-1.1 libradospp-devel-16.2.9.536+g41a9f9a5573-1.1 librbd-devel-16.2.9.536+g41a9f9a5573-1.1 librbd1-16.2.9.536+g41a9f9a5573-1.1 librgw-devel-16.2.9.536+g41a9f9a5573-1.1 librgw2-16.2.9.536+g41a9f9a5573-1.1 python3-ceph-argparse-16.2.9.536+g41a9f9a5573-1.1 python3-ceph-common-16.2.9.536+g41a9f9a5573-1.1 python3-cephfs-16.2.9.536+g41a9f9a5573-1.1 python3-rados-16.2.9.536+g41a9f9a5573-1.1 python3-rbd-16.2.9.536+g41a9f9a5573-1.1 python3-rgw-16.2.9.536+g41a9f9a5573-1.1 rados-objclass-devel-16.2.9.536+g41a9f9a5573-1.1 rbd-fuse-16.2.9.536+g41a9f9a5573-1.1 rbd-mirror-16.2.9.536+g41a9f9a5573-1.1 rbd-nbd-16.2.9.536+g41a9f9a5573-1.1 ceph-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-base-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-common-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-fuse-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-grafana-dashboards-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-immutable-object-cache-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mds-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-cephadm-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-dashboard-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-diskprediction-local-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-k8sevents-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-modules-core-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mgr-rook-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-mon-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-osd-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-prometheus-alerts-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed ceph-radosgw-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed cephadm-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed cephfs-mirror-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed cephfs-shell-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed cephfs-top-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed libcephfs-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed libcephfs2-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed libcephsqlite-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed libcephsqlite-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librados-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librados2-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed libradospp-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librbd-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librbd1-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librgw-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed librgw2-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-ceph-argparse-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-ceph-common-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-cephfs-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-rados-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-rbd-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed python3-rgw-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed rados-objclass-devel-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed rbd-fuse-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed rbd-mirror-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed rbd-nbd-16.2.9.536+g41a9f9a5573-1.1 as a component of openSUSE Tumbleweed A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks. CVE-2021-3979 openSUSE Tumbleweed:ceph-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-base-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-common-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-fuse-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-grafana-dashboards-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-immutable-object-cache-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mds-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-cephadm-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-dashboard-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-diskprediction-local-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-k8sevents-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-modules-core-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mgr-rook-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-mon-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-osd-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-prometheus-alerts-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:ceph-radosgw-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:cephadm-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:cephfs-mirror-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:cephfs-shell-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:cephfs-top-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:libcephfs-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:libcephfs2-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:libcephsqlite-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:libcephsqlite-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librados-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librados2-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:libradospp-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librbd-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librbd1-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librgw-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:librgw2-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-ceph-argparse-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-ceph-common-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-cephfs-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-rados-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-rbd-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:python3-rgw-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:rados-objclass-devel-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:rbd-fuse-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:rbd-mirror-16.2.9.536+g41a9f9a5573-1.1 openSUSE Tumbleweed:rbd-nbd-16.2.9.536+g41a9f9a5573-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3979.html CVE-2021-3979 https://bugzilla.suse.com/1194131 SUSE Bug 1194131