Security update for ceph (important)

An update that solves one vulnerability and has four fixes
is now available.

Description:

This update for ceph fixes the following issues:

Security issue fixed:

• CVE-2020-27781: Fixed a privilege escalation via the ceph_volume_client
  Python interface (bsc#1180155, bsc#1179802).

Non-security issues fixed:

• Update to 15.2.8-80-g1f4b6229ca:

  • Rebase on tip of upstream “octopus” branch, SHA1
    bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
    • upstream Octopus v15.2.8 release, see
      https://ceph.io/releases/v15-2-8-octopus-released/

• Update to 15.2.7-776-g343cd10fe5:

  • Rebase on tip of upstream “octopus” branch, SHA1
    1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
    • (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  • (bsc#1179016) rpm: require smartmontools on SUSE
  • (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group
    subcommand

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2020-2327=1