RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

This update for ceph fixes the following issues :

Security issues fixed :

  - CVE-2018-7262: rgw: malformed http headers can crash rgw     (bsc#1081379).

  - CVE-2017-16818: User reachable asserts allow for DoS     (bsc#1063014).

Bug fixes :

  - bsc#1061461: OSDs keep generating coredumps after adding     new OSD node to cluster.

  - bsc#1079076: RGW openssl fixes.

  - bsc#1067088: Upgrade to SES5 restarted all nodes,     majority of OSDs aborts during start.

  - bsc#1056125: Some OSDs are down when doing performance     testing on rbd image in EC Pool.

  - bsc#1087269: allow_ec_overwrites option not in command     options list.

  - bsc#1051598: Fix mountpoint check for systemctl enable
    --runtime.

  - bsc#1070357: Zabbix mgr module doesn't recover from     HEALTH_ERR.

  - bsc#1066502: After upgrading a single OSD from SES 4 to     SES 5 the OSDs do not rejoin the cluster.

  - bsc#1067119: Crushtool decompile creates wrong device     entries (device 20 device20) for not existing / deleted     OSDs.

  - bsc#1060904: Loglevel misleading during keystone     authentication.

  - bsc#1056967: Monitors goes down after pool creation on     cluster with 120 OSDs.

  - bsc#1067705: Issues with RGW Multi-Site Federation     between SES5 and RH Ceph Storage 2.

  - bsc#1059458: Stopping / restarting rados gateway as part     of deepsea stage.4 executions causes core-dump of     radosgw.

  - bsc#1087493: Commvault cannot reconnect to storage after     restarting haproxy.

  - bsc#1066182: Container synchronization between two Ceph     clusters failed.

  - bsc#1081600: Crash in civetweb/RGW.

  - bsc#1054061: NFS-GANESHA service failing while trying to     list mountpoint on client.

  - bsc#1074301: OSDs keep aborting: SnapMapper failed     asserts.

  - bsc#1086340: XFS metadata corruption on rbd-nbd mapped     image with journaling feature enabled.

  - bsc#1080788: fsid mismatch when creating additional     OSDs.

  - bsc#1071386: Metadata spill onto block.slow.

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for ceph fixes the following issues: Security issues fixed :

  - CVE-2018-7262: rgw: malformed http headers can crash rgw     (bsc#1081379).

  - CVE-2017-16818: User reachable asserts allow for DoS     (bsc#1063014). Bug fixes :

  - bsc#1061461: OSDs keep generating coredumps after adding     new OSD node to cluster.

  - bsc#1079076: RGW openssl fixes.

  - bsc#1067088: Upgrade to SES5 restarted all nodes,     majority of OSDs aborts during start.

  - bsc#1056125: Some OSDs are down when doing performance     testing on rbd image in EC Pool.

  - bsc#1087269: allow_ec_overwrites option not in command     options list.

  - bsc#1051598: Fix mountpoint check for systemctl enable
    --runtime.

  - bsc#1070357: Zabbix mgr module doesn't recover from     HEALTH_ERR.

  - bsc#1066502: After upgrading a single OSD from SES 4 to     SES 5 the OSDs do not rejoin the cluster.

  - bsc#1067119: Crushtool decompile creates wrong device     entries (device 20 device20) for not existing / deleted     OSDs.

  - bsc#1060904: Loglevel misleading during keystone     authentication.

  - bsc#1056967: Monitors goes down after pool creation on     cluster with 120 OSDs.

  - bsc#1067705: Issues with RGW Multi-Site Federation     between SES5 and RH Ceph Storage 2.

  - bsc#1059458: Stopping / restarting rados gateway as part     of deepsea stage.4 executions causes core-dump of     radosgw.

  - bsc#1087493: Commvault cannot reconnect to storage after     restarting haproxy.

  - bsc#1066182: Container synchronization between two Ceph     clusters failed.

  - bsc#1081600: Crash in civetweb/RGW.

  - bsc#1054061: NFS-GANESHA service failing while trying to     list mountpoint on client.

  - bsc#1074301: OSDs keep aborting: SnapMapper failed     asserts.

  - bsc#1086340: XFS metadata corruption on rbd-nbd mapped     image with journaling feature enabled.

  - bsc#1080788: fsid mismatch when creating additional     OSDs.

  - bsc#1071386: Metadata spill onto block.slow.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New release (1:12.2.2-1), security fix for CVE-2017-16818

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
110257	openSUSE Security Update : ceph (openSUSE-2018-541)	Nessus	SuSE Local Security Checks	Local	high
110123	SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2018:1417-1)	Nessus	SuSE Local Security Checks	Local	high
105932	Fedora 27 : 1:ceph (2017-97b730736f)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2017-16818

medium

Tenable Plugins

high

high

medium