projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: edd12f5 04a1718)
ceph (16.2.15+ds-0+deb12u2) bookworm-security; urgency=high
authorSalvatore Bonaccorso <carnil@debian.org>
Sat, 16 May 2026 12:52:24 +0000 (14:52 +0200)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 16 May 2026 12:52:24 +0000 (14:52 +0200)
commitc9d96eeff2537f3f6046ea16d7de022c3acb2bfb
treef31705cb68ca7707c7957084f587b794b6521582tree | snapshot
parentedd12f5fc504597a30b732aad7fc0fe4df590afacommit | diff
parent04a17184bcb72e4ad22c840aac9c9bbab4f57ae1commit | diff
ceph (16.2.15+ds-0+deb12u2) bookworm-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * mgr/alerts: enforce ssl context to SMTP_SSL (CVE-2024-31884)
    (Closes: #1126573)
  * Check if `HTTP_X_AMZ_COPY_SOURCE` header is empty (CVE-2024-47866)
    (Closes: #1120797)
  * client: disallow unprivileged users to escalate root privileges
    (CVE-2025-52555) (Closes: #1108410)
  * client: prohibit unprivileged users from setting sgid/suid bits

[dgit import unpatched ceph 16.2.15+ds-0+deb12u2]
145 files changed:
debian/.gitlab-ci.yml | | blob
debian/README.Debian | | blob
debian/calc-max-parallel.sh | | blob
debian/ceph-base.ceph.init | | blob
debian/ceph-base.dirs | | blob
debian/ceph-base.docs | | blob
debian/ceph-base.install | | blob
debian/ceph-base.postinst | | blob
debian/ceph-base.postrm | | blob
debian/ceph-common.dirs | | blob
debian/ceph-common.install | | blob
debian/ceph-common.lintian-overrides | | blob
debian/ceph-common.manpages | | blob
debian/ceph-common.postinst | | blob
debian/ceph-common.postrm | | blob
debian/ceph-common.preinst | | blob
debian/ceph-common.rbdmap.init | | blob
debian/ceph-fs-common.install | | blob
debian/ceph-fuse.install | | blob
debian/ceph-fuse.lintian-overrides | | blob
debian/ceph-fuse.manpages | | blob
debian/ceph-grafana-dashboards.install | | blob
debian/ceph-immutable-object-cache.install | | blob
debian/ceph-mds.dirs | | blob
debian/ceph-mds.install | | blob
debian/ceph-mds.lintian-overrides | | blob
debian/ceph-mds.postinst | | blob
debian/ceph-mgr-cephadm.install | | blob
debian/ceph-mgr-cephadm.postinst | | blob
debian/ceph-mgr-dashboard.install | | blob
debian/ceph-mgr-dashboard.postinst | | blob
debian/ceph-mgr-k8sevents.install | | blob
debian/ceph-mgr-k8sevents.postinst | | blob
debian/ceph-mgr-modules-core.install | | blob
debian/ceph-mgr-rook.install | | blob
debian/ceph-mgr-rook.postinst | | blob
debian/ceph-mgr.dirs | | blob
debian/ceph-mgr.install | | blob
debian/ceph-mgr.postinst | | blob
debian/ceph-mon.dirs | | blob
debian/ceph-mon.install | | blob
debian/ceph-mon.postinst | | blob
debian/ceph-osd.dirs | | blob
debian/ceph-osd.install | | blob
debian/ceph-prometheus-alerts.install | | blob
debian/ceph-resource-agents.install | | blob
debian/ceph-test.install | | blob
debian/ceph.NEWS | | blob
debian/ceph.lintian-overrides | | blob
debian/cephadm.install | | blob
debian/cephadm.postinst | | blob
debian/cephfs-mirror.install | | blob
debian/cephfs-shell.install | | blob
debian/cephfs-top.install | | blob
debian/changelog | | blob
debian/clean | | blob
debian/control | | blob
debian/copyright | | blob
debian/gbp.conf | | blob
debian/lib-systemd/system-sleep/ceph | | blob
debian/lib-systemd/system/ceph-create-keys.service | | blob
debian/lib-systemd/system/ceph-mds.service | | blob
debian/lib-systemd/system/ceph-mon.service | | blob
debian/lib-systemd/system/ceph-osd@.service | | blob
debian/libcephfs-dev.install | | blob
debian/libcephfs-java.jlibs | | blob
debian/libcephfs-jni.install | | blob
debian/libcephfs-jni.lintian-overrides | | blob
debian/libcephfs2.install | | blob
debian/libcephfs2.lintian-overrides | | blob
debian/libcephfs2.symbols | | blob
debian/librados-dev.install | | blob
debian/librados2.install | | blob
debian/librados2.lintian-overrides | | blob
debian/libradospp-dev.install | | blob
debian/libradosstriper-dev.install | | blob
debian/libradosstriper1.install | | blob
debian/libradosstriper1.symbols | | blob
debian/librbd-dev.install | | blob
debian/librbd1.install | | blob
debian/librbd1.symbols | | blob
debian/librgw-dev.install | | blob
debian/librgw2.install | | blob
debian/libsqlite3-mod-ceph-dev.install | | blob
debian/libsqlite3-mod-ceph.install | | blob
debian/man/ceph-crush-location.1 | | blob
debian/man/mount.fuse.ceph.8 | | blob
debian/missing-sources/bootstrap.js | | blob
debian/missing-sources/two.js | | blob
debian/patches/32bit-fixes.patch | | blob
debian/patches/CVE-2022-3854_1_rgw_Guard_against_malformed_bucket_URLs.patch | | blob
debian/patches/CVE-2024-48916.patch | | blob
debian/patches/Check-if-HTTP_X_AMZ_COPY_SOURCE-header-is-empty.patch | | blob
debian/patches/Fix-build-with-fmt-8-9.patch | | blob
debian/patches/add-option-to-disable-ceph-dencoder.patch | | blob
debian/patches/bug1914584.patch | | blob
debian/patches/civetweb-755-1.8-somaxconn-configurable.patch | | blob
debian/patches/civetweb-755-1.8-somaxconn-configurable_conf.patch | | blob
debian/patches/civetweb-755-1.8-somaxconn-configurable_test.patch | | blob
debian/patches/client-disallow-unprivileged-users-to-escalate-root-.patch | | blob
debian/patches/client-prohibit-unprivileged-users-from-setting-sgid.patch | | blob
debian/patches/cmake-test-for-16-bytes-atomic-support-on-mips-also.patch | | blob
debian/patches/compile-ppc.c-on-all-powerpc-machines.patch | | blob
debian/patches/debian-armel-armhf-buildflags.patch | | blob
debian/patches/disable-crypto.patch | | blob
debian/patches/enable-strsignal.patch | | blob
debian/patches/fix-CheckCxxAtomic-riscv64.patch | | blob
debian/patches/fix-bash-completion-location | | blob
debian/patches/fix-ceph-osd-systemd-target.patch | | blob
debian/patches/mgr-alerts-enforce-ssl-context-to-SMTP_SSL.patch | | blob
debian/patches/only-yied-under-armv7-and-above.patch | | blob
debian/patches/riscv64-link-pthread.patch | | blob
debian/patches/series | | blob
debian/patches/update-java-source-target-flags.patch | | blob
debian/py3dist-overrides | | blob
debian/python3-ceph-argparse.install | | blob
debian/python3-ceph-common.install | | blob
debian/python3-ceph.lintian-overrides | | blob
debian/python3-cephfs.install | | blob
debian/python3-rados.install | | blob
debian/python3-rbd.install | | blob
debian/python3-rgw.install | | blob
debian/rados-objclass-dev.install | | blob
debian/radosgw.dirs | | blob
debian/radosgw.install | | blob
debian/radosgw.lintian-overrides | | blob
debian/radosgw.postinst | | blob
debian/radosgw.prerm | | blob
debian/rbd-fuse.install | | blob
debian/rbd-mirror.install | | blob
debian/rbd-nbd.install | | blob
debian/rest-bench.install | | blob
debian/rules | | blob
debian/source.lintian-overrides | | blob
debian/source/format | | blob
debian/source/lintian-overrides | | blob
debian/source/options | | blob
debian/tests/build-rados | | blob
debian/tests/build-rbd | | blob
debian/tests/ceph-client | | blob
debian/tests/control | | blob
debian/tests/python-ceph | | blob
debian/udev/95-ceph-osd-lvm.rules | | blob
debian/watch | | blob
debian/workarounds/ceph-dencoder-oom | | blob
Unnamed repository; edit this file 'description' to name the repository.