Security update for ceph SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0930-1 Final 1 1 2020-04-06T18:23:17Z current 2020-04-06T18:23:17Z 2020-04-06T18:23:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ceph This update for ceph fixes the following issues: - CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403) - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/hyperkube:v1.17.17-2020-930,SUSE-2020-930,SUSE-SLE-Module-Basesystem-15-SP1-2020-930,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-930,SUSE-Storage-6-2020-930 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200930-1/ Link for SUSE-SU-2020:0930-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006679.html E-Mail link for SUSE-SU-2020:0930-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1166403 SUSE Bug 1166403 https://bugzilla.suse.com/1166484 SUSE Bug 1166484 https://www.suse.com/security/cve/CVE-2020-1759/ SUSE CVE CVE-2020-1759 page https://www.suse.com/security/cve/CVE-2020-1760/ SUSE CVE CVE-2020-1760 page Container caasp/v4/hyperkube:v1.17.17 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 ceph-common-14.2.5.389+gb0f23ac248-3.35.2 libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 librados2-14.2.5.389+gb0f23ac248-3.35.2 librbd1-14.2.5.389+gb0f23ac248-3.35.2 librgw2-14.2.5.389+gb0f23ac248-3.35.2 python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 python3-rados-14.2.5.389+gb0f23ac248-3.35.2 python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 ceph-14.2.5.389+gb0f23ac248-3.35.2 ceph-base-14.2.5.389+gb0f23ac248-3.35.2 ceph-dashboard-e2e-14.2.5.389+gb0f23ac248-3.35.2 ceph-fuse-14.2.5.389+gb0f23ac248-3.35.2 ceph-grafana-dashboards-14.2.5.389+gb0f23ac248-3.35.2 ceph-mds-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-dashboard-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-diskprediction-cloud-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-diskprediction-local-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-k8sevents-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-rook-14.2.5.389+gb0f23ac248-3.35.2 ceph-mgr-ssh-14.2.5.389+gb0f23ac248-3.35.2 ceph-mon-14.2.5.389+gb0f23ac248-3.35.2 ceph-osd-14.2.5.389+gb0f23ac248-3.35.2 ceph-prometheus-alerts-14.2.5.389+gb0f23ac248-3.35.2 ceph-radosgw-14.2.5.389+gb0f23ac248-3.35.2 ceph-test-14.2.5.389+gb0f23ac248-3.35.2 cephfs-shell-14.2.5.389+gb0f23ac248-3.35.2 libcephfs-devel-14.2.5.389+gb0f23ac248-3.35.2 librados-devel-14.2.5.389+gb0f23ac248-3.35.2 libradospp-devel-14.2.5.389+gb0f23ac248-3.35.2 librbd-devel-14.2.5.389+gb0f23ac248-3.35.2 librgw-devel-14.2.5.389+gb0f23ac248-3.35.2 rados-objclass-devel-14.2.5.389+gb0f23ac248-3.35.2 rbd-fuse-14.2.5.389+gb0f23ac248-3.35.2 rbd-mirror-14.2.5.389+gb0f23ac248-3.35.2 rbd-nbd-14.2.5.389+gb0f23ac248-3.35.2 ceph-common-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 librados2-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 librbd1-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 librgw2-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rados-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 as a component of Container caasp/v4/hyperkube:v1.17.17 ceph-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-base-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-common-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-fuse-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-grafana-dashboards-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mds-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mgr-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mgr-dashboard-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mgr-diskprediction-local-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mgr-rook-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-mon-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-osd-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-prometheus-alerts-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-radosgw-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 cephfs-shell-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 librados2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 librbd1-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 librgw2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 python3-rados-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 rbd-fuse-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 rbd-mirror-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 rbd-nbd-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Enterprise Storage 6 ceph-common-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcephfs-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librados-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librados2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libradospp-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librbd-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librbd1-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librgw-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 librgw2-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rados-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 rados-objclass-devel-14.2.5.389+gb0f23ac248-3.35.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. CVE-2020-1759 Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-base-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-fuse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mds-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mon-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-osd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-radosgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:cephfs-shell-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librados2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librbd1-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librgw2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-fuse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-mirror-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-nbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.5.389+gb0f23ac248-3.35.2 important 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200930-1/ https://www.suse.com/security/cve/CVE-2020-1759.html CVE-2020-1759 https://bugzilla.suse.com/1166403 SUSE Bug 1166403 A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input. CVE-2020-1760 Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-base-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-fuse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mds-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-mon-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-osd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:ceph-radosgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:cephfs-shell-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librados2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librbd1-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:librgw2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-fuse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-mirror-14.2.5.389+gb0f23ac248-3.35.2 SUSE Enterprise Storage 6:rbd-nbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.5.389+gb0f23ac248-3.35.2 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200930-1/ https://www.suse.com/security/cve/CVE-2020-1760.html CVE-2020-1760 https://bugzilla.suse.com/1166484 SUSE Bug 1166484