SUSE-RU-2024:0081-1: Recommended update for ceph
This update for ceph fixes the following issues: Fix FTBFS on gcc 13 (bsc#1201088) Fix FTBFS on s390x (bsc#1211090) ceph-volume: Fix regression in activate (bsc#1210243, bsc#1210314) cephadm: Fix NFS haproxy failover if active node disappears (bsc#1209621) cephadm: Mount host /etc/hosts for daemon containers in podman deployments (bsc#1210719) cmake: Patch boost source to support python 3.11 (bsc#1210944) mgr: Don't dump global config holding gil (bsc#1199880) mgr/cephadm: Fix handling of mgr upgrades with 3 or more mgrs (bsc#1210153) mgr/dashboard: allow to pass controls on iscsi disk create (bsc#1208820) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode' (bsc#1210784)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/librados2-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librados2to a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-debugsourceto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librbd1to a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librbd1-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librgw-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgrto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephfs-shellto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-rados-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephfs-mirror-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-radosto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mds-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephfs2-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephfs2to a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-fuseto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-mirrorto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librgw2to a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-rgw-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-ceph-commonto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librados-devel-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-nbdto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-radosgwto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-immutable-object-cache-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-fuseto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-common-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mon-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librgw2-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-cephfs-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephsqlite-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-mirror-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephfs-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephsqlite-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-commonto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-fuse-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephfs-mirrorto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librbd-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libradospp-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-rbd-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/libcephsqliteto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-fuse-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rbd-nbd-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/rados-objclass-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/librados-develto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-osd-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mdsto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-ceph-argparseto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-monto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-cephfsto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-rbdto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-baseto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-immutable-object-cacheto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-radosgw-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/python3-rgwto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-base-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-osdto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-dashboardto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-grafana-dashboardsto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-cephadmto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-prometheus-alertsto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephadmto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/cephfs-topto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-k8seventsto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-modules-coreto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-rookto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-mgr-diskprediction-localto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-test-debuginfoto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-test-debugsourceto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade
suse/ceph-testto a version that resolves this vulnerability.Fixed in 16.2.13.66 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-81=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-81=1
Event History
Frequently Asked Questions
Is this a security vulnerability update?
No specific security vulnerability or CVE is identified in the advisory. It is a recommended Ceph update addressing build failures, ceph-volume activation behavior, cephadm failover and container configuration, manager upgrades, and dashboard issues.
Which deployments are most likely to benefit from applying this update?
The fixes are relevant to Ceph environments using ceph-volume activation, cephadm-managed NFS with HAProxy failover, Podman daemon containers, multiple manager daemons, or the dashboard’s SSO and iSCSI disk-creation functions. Build-related fixes also affect environments building Ceph with GCC 13, on s390x, or with Python 3.11 support.
What operational symptoms could indicate that an environment is affected?
Potential indicators include ceph-volume activation regressions, NFS HAProxy failover failures after the active node disappears, manager upgrade problems in clusters with three or more managers, dashboard SSO errors involving a missing decode attribute, or failures building Ceph under the affected toolchain and platform conditions.