SUSE-SU-2020:3257-1

Vulnerability from csaf_suse - Published: 2020-11-20 11:14 - Updated: 2020-11-20 11:14
Summary
Security update for ceph, deepsea
Severity
Moderate
Notes
Title of the patch: Security update for ceph, deepsea
Description of the patch: This update for ceph, deepsea fixes the following issues: - Update to 14.2.13-398-gb6c514eec7: + Upstream 14.2.13 release see https://ceph.io/releases/v14-2-13-nautilus-released/ * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor - Update to 14.2.12-436-g6feab505b7: + Upstream 14.2.12 release see https://ceph.io/releases/v14-2-12-nautilus-released/ * (bsc#1169134) mgr/dashboard: document Prometheus' security model * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible + (bsc#1175781) ceph-volume: lvmcache: print help correctly + spec: move python-enum34 into rhel 7 conditional - Update to 14.2.11-394-g9cbbc473c0: + Upstream 14.2.11 release see https://ceph.io/releases/v14-2-11-nautilus-released/ * mgr/progress: Skip pg_summary update if _events dict is empty (bsc#1167477) (bsc#1172142) (bsc#1171956) * mgr/dashboard: Allow to edit iSCSI target with active session (bsc#1173339) - Update to 14.2.10-392-gb3a13b81cb: + Upstream 14.2.10 release see https://ceph.io/releases/v14-2-10-nautilus-released/ * mgr: Improve internal python to c++ interface (bsc#1167477) - Update to 14.2.9-970-ged84cae0c9: + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader (bsc#1171921, CVE-2020-10753) - Update to 14.2.9-969-g9917342dc8d: * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d * cmake: Improve test for 16-byte atomic support on IBM Z * (jsc#SES-680) monitoring: add details to Prometheus alerts * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down * (bsc#1159689) os/bluestore: more flexible DB volume space usage * (bsc#1156087) ceph-volume: make get_devices fs location independent * (bsc#1156409) monitoring: wait before firing osd full alert * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls * (bsc#1165713) mgr/dashboard: Repair broken grafana panels * (bsc#1165835) rgw: get barbican secret key request maybe return error code * (bsc#1165840) rgw: making implicit_tenants backwards compatible * (bsc#1166297) mgr/dashboard: Repair broken grafana panels * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation * (bsc#1166670) monitoring: root volume full alert fires false positives * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default - Update to 14.2.13-398-gb6c514eec7: + Upstream 14.2.13 release see https://ceph.io/releases/v14-2-13-nautilus-released/ * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor - Update to 14.2.12-436-g6feab505b7: + Upstream 14.2.12 release see https://ceph.io/releases/v14-2-12-nautilus-released/ * (bsc#1169134) mgr/dashboard: document Prometheus' security model * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible + (bsc#1175781) ceph-volume: lvmcache: print help correctly + spec: move python-enum34 into rhel 7 conditional - Update to 14.2.11-394-g9cbbc473c0: + Upstream 14.2.11 release see https://ceph.io/releases/v14-2-11-nautilus-released/ * mgr/progress: Skip pg_summary update if _events dict is empty (bsc#1167477) (bsc#1172142) (bsc#1171956) * mgr/dashboard: Allow to edit iSCSI target with active session (bsc#1173339) - Update to 14.2.10-392-gb3a13b81cb: + Upstream 14.2.10 release see https://ceph.io/releases/v14-2-10-nautilus-released/ * mgr: Improve internal python to c++ interface (bsc#1167477) - Update to 14.2.9-970-ged84cae0c9: + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader (bsc#1171921, CVE-2020-10753) - Update to 14.2.9-969-g9917342dc8d: * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d * cmake: Improve test for 16-byte atomic support on IBM Z * (jsc#SES-680) monitoring: add details to Prometheus alerts * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down * (bsc#1159689) os/bluestore: more flexible DB volume space usage * (bsc#1156087) ceph-volume: make get_devices fs location independent * (bsc#1156409) monitoring: wait before firing osd full alert * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls * (bsc#1165713) mgr/dashboard: Repair broken grafana panels * (bsc#1165835) rgw: get barbican secret key request maybe return error code * (bsc#1165840) rgw: making implicit_tenants backwards compatible * (bsc#1166297) mgr/dashboard: Repair broken grafana panels * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation * (bsc#1166670) monitoring: root volume full alert fires false positives * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default - Version: 0.9.33 - drop workarounds for old ceph-volume lvm batch command - runners/upgrade: Add SES6->7 pre-upgrade checks
Patchnames: SUSE-2020-3257,SUSE-Storage-6-2020-3257
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch —
Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch —
Vendor Fix
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1151612 self
https://bugzilla.suse.com/1152100 self
https://bugzilla.suse.com/1155045 self
https://bugzilla.suse.com/1155262 self
https://bugzilla.suse.com/1156087 self
https://bugzilla.suse.com/1156409 self
https://bugzilla.suse.com/1158257 self
https://bugzilla.suse.com/1159689 self
https://bugzilla.suse.com/1160626 self
https://bugzilla.suse.com/1161718 self
https://bugzilla.suse.com/1162553 self
https://bugzilla.suse.com/1163119 self
https://bugzilla.suse.com/1164571 self
https://bugzilla.suse.com/1165713 self
https://bugzilla.suse.com/1165835 self
https://bugzilla.suse.com/1165840 self
https://bugzilla.suse.com/1166297 self
https://bugzilla.suse.com/1166393 self
https://bugzilla.suse.com/1166624 self
https://bugzilla.suse.com/1166670 self
https://bugzilla.suse.com/1166932 self
https://bugzilla.suse.com/1167477 self
https://bugzilla.suse.com/1168403 self
https://bugzilla.suse.com/1169134 self
https://bugzilla.suse.com/1169356 self
https://bugzilla.suse.com/1170487 self
https://bugzilla.suse.com/1170938 self
https://bugzilla.suse.com/1171367 self
https://bugzilla.suse.com/1171921 self
https://bugzilla.suse.com/1171956 self
https://bugzilla.suse.com/1172142 self
https://bugzilla.suse.com/1173339 self
https://bugzilla.suse.com/1174591 self
https://bugzilla.suse.com/1175061 self
https://bugzilla.suse.com/1175240 self
https://bugzilla.suse.com/1175781 self
https://www.suse.com/security/cve/CVE-2020-10753/ self
https://www.suse.com/security/cve/CVE-2020-10753 external
https://bugzilla.suse.com/1171921 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ceph, deepsea",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ceph, deepsea fixes the following issues:\n\n- Update to 14.2.13-398-gb6c514eec7:\n  + Upstream 14.2.13 release\n    see https://ceph.io/releases/v14-2-13-nautilus-released/\n    * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor   \n\n- Update to 14.2.12-436-g6feab505b7:\n  + Upstream 14.2.12 release\n    see https://ceph.io/releases/v14-2-12-nautilus-released/\n    * (bsc#1169134) mgr/dashboard: document Prometheus\u0027 security model\n    * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval\n    * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client\n    * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in\n    * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs\n    * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible\n  + (bsc#1175781) ceph-volume: lvmcache: print help correctly\n  + spec: move python-enum34 into rhel 7 conditional\n\n- Update to 14.2.11-394-g9cbbc473c0:\n  + Upstream 14.2.11 release\n    see https://ceph.io/releases/v14-2-11-nautilus-released/\n    * mgr/progress: Skip pg_summary update if _events dict is empty\n      (bsc#1167477) (bsc#1172142) (bsc#1171956)\n    * mgr/dashboard: Allow to edit iSCSI target with active session\n      (bsc#1173339)\n\n- Update to 14.2.10-392-gb3a13b81cb:\n  + Upstream 14.2.10 release\n    see https://ceph.io/releases/v14-2-10-nautilus-released/\n    * mgr: Improve internal python to c++ interface (bsc#1167477)\n\n- Update to 14.2.9-970-ged84cae0c9: \n  + rgw: sanitize newlines in s3 CORSConfiguration\u0027s ExposeHeader\n    (bsc#1171921, CVE-2020-10753) \n\n- Update to 14.2.9-969-g9917342dc8d:\n  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d\n  * cmake: Improve test for 16-byte atomic support on IBM Z\n  * (jsc#SES-680) monitoring: add details to Prometheus alerts\n  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking\n  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken\n  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down\n  * (bsc#1159689) os/bluestore: more flexible DB volume space usage\n  * (bsc#1156087) ceph-volume: make get_devices fs location independent\n  * (bsc#1156409) monitoring: wait before firing osd full alert\n  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use\n  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option\n  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output\n  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user\n  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls\n  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels\n  * (bsc#1165835) rgw: get barbican secret key request maybe return error code\n  * (bsc#1165840) rgw: making implicit_tenants backwards compatible\n  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels\n  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload\n  * (bsc#1166624) mgr/dashboard: Fix iSCSI\u0027s username and password validation\n  * (bsc#1166670) monitoring: root volume full alert fires false positives\n  * (bsc#1166932) mgr: synchronize ClusterState\u0027s health and mon_status\n  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend \n  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue\n  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down\n  * (bsc#1171367) Set OSD\u0027s bluefs-buffered-io param to false by default\n\n- Update to 14.2.13-398-gb6c514eec7:\n  + Upstream 14.2.13 release\n    see https://ceph.io/releases/v14-2-13-nautilus-released/\n    * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor\n    \n\n- Update to 14.2.12-436-g6feab505b7:\n  + Upstream 14.2.12 release\n    see https://ceph.io/releases/v14-2-12-nautilus-released/\n    * (bsc#1169134) mgr/dashboard: document Prometheus\u0027 security model\n    * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval\n    * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client\n    * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in\n    * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs\n    * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible\n  + (bsc#1175781) ceph-volume: lvmcache: print help correctly\n  + spec: move python-enum34 into rhel 7 conditional\n\n- Update to 14.2.11-394-g9cbbc473c0:\n  + Upstream 14.2.11 release\n    see https://ceph.io/releases/v14-2-11-nautilus-released/\n    * mgr/progress: Skip pg_summary update if _events dict is empty\n      (bsc#1167477) (bsc#1172142) (bsc#1171956)\n    * mgr/dashboard: Allow to edit iSCSI target with active session\n      (bsc#1173339)\n\n- Update to 14.2.10-392-gb3a13b81cb:\n  + Upstream 14.2.10 release\n    see https://ceph.io/releases/v14-2-10-nautilus-released/\n    * mgr: Improve internal python to c++ interface (bsc#1167477)\n\n- Update to 14.2.9-970-ged84cae0c9: \n  + rgw: sanitize newlines in s3 CORSConfiguration\u0027s ExposeHeader\n    (bsc#1171921, CVE-2020-10753) \n\n- Update to 14.2.9-969-g9917342dc8d:\n  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d\n  * cmake: Improve test for 16-byte atomic support on IBM Z\n  * (jsc#SES-680) monitoring: add details to Prometheus alerts\n  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking\n  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken\n  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down\n  * (bsc#1159689) os/bluestore: more flexible DB volume space usage\n  * (bsc#1156087) ceph-volume: make get_devices fs location independent\n  * (bsc#1156409) monitoring: wait before firing osd full alert\n  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use\n  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option\n  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output\n  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user\n  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls\n  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels\n  * (bsc#1165835) rgw: get barbican secret key request maybe return error code\n  * (bsc#1165840) rgw: making implicit_tenants backwards compatible\n  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels\n  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload\n  * (bsc#1166624) mgr/dashboard: Fix iSCSI\u0027s username and password validation\n  * (bsc#1166670) monitoring: root volume full alert fires false positives\n  * (bsc#1166932) mgr: synchronize ClusterState\u0027s health and mon_status\n  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend \n  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue\n  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down\n  * (bsc#1171367) Set OSD\u0027s bluefs-buffered-io param to false by default\n\n- Version: 0.9.33\n- drop workarounds for old ceph-volume lvm batch command\n\n- runners/upgrade: Add SES6-\u003e7 pre-upgrade checks",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-3257,SUSE-Storage-6-2020-3257",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3257-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:3257-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20203257-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:3257-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007733.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1151612",
        "url": "https://bugzilla.suse.com/1151612"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152100",
        "url": "https://bugzilla.suse.com/1152100"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155045",
        "url": "https://bugzilla.suse.com/1155045"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155262",
        "url": "https://bugzilla.suse.com/1155262"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156087",
        "url": "https://bugzilla.suse.com/1156087"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156409",
        "url": "https://bugzilla.suse.com/1156409"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158257",
        "url": "https://bugzilla.suse.com/1158257"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1159689",
        "url": "https://bugzilla.suse.com/1159689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160626",
        "url": "https://bugzilla.suse.com/1160626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161718",
        "url": "https://bugzilla.suse.com/1161718"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1162553",
        "url": "https://bugzilla.suse.com/1162553"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1163119",
        "url": "https://bugzilla.suse.com/1163119"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1164571",
        "url": "https://bugzilla.suse.com/1164571"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165713",
        "url": "https://bugzilla.suse.com/1165713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165835",
        "url": "https://bugzilla.suse.com/1165835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165840",
        "url": "https://bugzilla.suse.com/1165840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166297",
        "url": "https://bugzilla.suse.com/1166297"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166393",
        "url": "https://bugzilla.suse.com/1166393"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166624",
        "url": "https://bugzilla.suse.com/1166624"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166670",
        "url": "https://bugzilla.suse.com/1166670"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166932",
        "url": "https://bugzilla.suse.com/1166932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167477",
        "url": "https://bugzilla.suse.com/1167477"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168403",
        "url": "https://bugzilla.suse.com/1168403"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169134",
        "url": "https://bugzilla.suse.com/1169134"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169356",
        "url": "https://bugzilla.suse.com/1169356"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170487",
        "url": "https://bugzilla.suse.com/1170487"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170938",
        "url": "https://bugzilla.suse.com/1170938"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171367",
        "url": "https://bugzilla.suse.com/1171367"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171921",
        "url": "https://bugzilla.suse.com/1171921"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171956",
        "url": "https://bugzilla.suse.com/1171956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172142",
        "url": "https://bugzilla.suse.com/1172142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173339",
        "url": "https://bugzilla.suse.com/1173339"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174591",
        "url": "https://bugzilla.suse.com/1174591"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175061",
        "url": "https://bugzilla.suse.com/1175061"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175240",
        "url": "https://bugzilla.suse.com/1175240"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175781",
        "url": "https://bugzilla.suse.com/1175781"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10753 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10753/"
      }
    ],
    "title": "Security update for ceph, deepsea",
    "tracking": {
      "current_release_date": "2020-11-20T11:14:55Z",
      "generator": {
        "date": "2020-11-20T11:14:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:3257-1",
      "initial_release_date": "2020-11-20T11:14:55Z",
      "revision_history": [
        {
          "date": "2020-11-20T11:14:55Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ceph-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librados2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librados2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librados2-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                "product": {
                  "name": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64",
                  "product_id": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ceph-dashboard-e2e-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-dashboard-e2e-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-dashboard-e2e-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-grafana-dashboards-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-dashboard-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-diskprediction-cloud-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-diskprediction-cloud-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-diskprediction-cloud-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-diskprediction-local-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-k8sevents-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-k8sevents-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-k8sevents-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-rook-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-ssh-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-mgr-ssh-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-mgr-ssh-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-prometheus-alerts-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                "product": {
                  "name": "ceph-prometheus-alerts-14.2.13.398+gb6c514eec7-3.20.1.noarch",
                  "product_id": "ceph-prometheus-alerts-14.2.13.398+gb6c514eec7-3.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                "product": {
                  "name": "deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                  "product_id": "deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                "product": {
                  "name": "deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                  "product_id": "deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "deepsea-qa-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                "product": {
                  "name": "deepsea-qa-0.9.33+git.0.ed16d26e-3.27.1.noarch",
                  "product_id": "deepsea-qa-0.9.33+git.0.ed16d26e-3.27.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ceph-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-base-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-common-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-mds-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-mgr-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-mon-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-osd-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "ceph-radosgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "cephfs-shell-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "libcephfs-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "libcephfs2-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librados-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librados2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librados2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librados2-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "libradospp-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librbd-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librbd1-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librgw-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "librgw2-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "python3-ceph-argparse-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "python3-cephfs-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "python3-rados-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "python3-rbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "python3-rgw-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "rados-objclass-devel-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "rbd-fuse-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "rbd-mirror-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                "product": {
                  "name": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64",
                  "product_id": "rbd-nbd-14.2.13.398+gb6c514eec7-3.20.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 6",
                "product": {
                  "name": "SUSE Enterprise Storage 6",
                  "product_id": "SUSE Enterprise Storage 6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch"
        },
        "product_reference": "deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch"
        },
        "product_reference": "deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
          "SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10753",
          "url": "https://www.suse.com/security/cve/CVE-2020-10753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171921 for CVE-2020-10753",
          "url": "https://bugzilla.suse.com/1171921"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
            "SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:deepsea-0.9.33+git.0.ed16d26e-3.27.1.noarch",
            "SUSE Enterprise Storage 6:deepsea-cli-0.9.33+git.0.ed16d26e-3.27.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-20T11:14:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10753"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…