<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for ceph</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2021:0023-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-01-05T10:02:11Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-01-05T10:02:11Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-01-05T10:02:11Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for ceph</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2020-27781: Fixed a privilege escalation via the ceph_volume_client Python interface (bsc#1179802 bsc#1180155).

Non-security issues fixed:

- Fixes an issue when check in legacy collection reaches end. (bsc#1179139)
- Fixes an issue when storage service stops. (bsc#1178837)
- Fix for failing test run due to missing module 'six'. (bsc#1179452)
- Provide a different name for the fallback allocator in bluestore. (bsc#1180118)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Container caasp/v4/hyperkube:v1.17.17-2021-23,SUSE-2021-23,SUSE-SLE-Module-Basesystem-15-SP1-2021-23,SUSE-Storage-6-2021-23</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20210023-1/</URL>
      <Description>Link for SUSE-SU-2021:0023-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2021-January/008148.html</URL>
      <Description>E-Mail link for SUSE-SU-2021:0023-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1178837</URL>
      <Description>SUSE Bug 1178837</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1179139</URL>
      <Description>SUSE Bug 1179139</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1179452</URL>
      <Description>SUSE Bug 1179452</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1179802</URL>
      <Description>SUSE Bug 1179802</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1180118</URL>
      <Description>SUSE Bug 1180118</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1180155</URL>
      <Description>SUSE Bug 1180155</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-27781/</URL>
      <Description>SUSE CVE CVE-2020-27781 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Container caasp/v4/hyperkube:v1.17.17">
      <Branch Type="Product Name" Name="Container caasp/v4/hyperkube:v1.17.17">
        <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17">Container caasp/v4/hyperkube:v1.17.17</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 6">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 6">
        <FullProductName ProductID="SUSE Enterprise Storage 6" CPE="cpe:/o:suse:ses:6">SUSE Enterprise Storage 6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1" CPE="cpe:/o:suse:sle-module-basesystem:15:sp1">SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librados2-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librados2-14.2.16.402+g7d47dbaf4d-3.57.1">librados2-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1">librbd1-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1">librgw2-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1">python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1">python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-dashboard-e2e-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-dashboard-e2e-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-dashboard-e2e-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-diskprediction-cloud-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-diskprediction-cloud-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-diskprediction-cloud-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-k8sevents-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-k8sevents-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-k8sevents-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mgr-ssh-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mgr-ssh-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-ssh-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ceph-test-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="ceph-test-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-test-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1">cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1">libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1">rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1">
      <FullProductName ProductID="rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1</FullProductName>
    </Branch>
    <Relationship ProductReference="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="librados2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.16.402+g7d47dbaf4d-3.57.1">librados2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1">librbd1-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1">librgw2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1">python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1">python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="Container caasp/v4/hyperkube:v1.17.17">
      <FullProductName ProductID="Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of Container caasp/v4/hyperkube:v1.17.17</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1">cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="librados2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:librados2-14.2.16.402+g7d47dbaf4d-3.57.1">librados2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1">librbd1-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1">librgw2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1">python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1">python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1">rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1">ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1">libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librados2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.16.402+g7d47dbaf4d-3.57.1">librados2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1">libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1">librbd1-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1">librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1">librgw2-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1">python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1">python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1">python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1">rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.</Note>
    </Notes>
    <CVE>CVE-2020-27781</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:librados2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>Container caasp/v4/hyperkube:v1.17.17:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-base-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-fuse-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-grafana-dashboards-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mds-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mgr-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mgr-dashboard-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mgr-diskprediction-local-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mgr-rook-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-mon-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-osd-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-prometheus-alerts-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:ceph-radosgw-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:cephfs-shell-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:librados2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:rbd-fuse-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:rbd-mirror-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:rbd-nbd-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librados2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librbd1-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:librgw2-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP1:rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.6</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20210023-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-27781.html</URL>
        <Description>CVE-2020-27781</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1179802</URL>
        <Description>SUSE Bug 1179802</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1180155</URL>
        <Description>SUSE Bug 1180155</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
