SUSE-CU-2020:728-1: Security update of ses/7/rook/ceph

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: ses/7/rook/ceph
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:728-1
Container Tags        : ses/7/rook/ceph:1.4.7 , ses/7/rook/ceph:1.4.7.6 , ses/7/rook/ceph:1.4.7.6.1.1381 , ses/7/rook/ceph:latest , ses/7/rook/ceph:sle15.2.octopus
Container Release     : 1.1381
Severity              : important
Type                  : security
References            : 1170200 1174466 1177344 1177843 1178073 1178531 CVE-2020-25660
-----------------------------------------------------------------

The container ses/7/rook/ceph was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:3539-1
Released:    Thu Nov 26 15:52:34 2020
Summary:     Security update for ceph
Type:        security
Severity:    important
References:  1170200,1174466,1177344,1177843,1178073,1178531,CVE-2020-25660
This update for ceph fixes the following issues:

Security issue fixed:

- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).

- mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically (bsc#1170200)
- mon: have 'mon stat' output json as well (bsc#1174466)
- mgr/dashboard: support Orchestrator and user-defined Ganesha cluster (bsc#1177344)
- mgr/dashboard: fix downstream NFS doc links (bsc#1178073)
- cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph (bsc#1178531)