- ceph (16.2.10+ds-2+rpi1) bookworm-staging; urgency=medium
++ceph (16.2.10+ds-5+rpi1) bookworm-staging; urgency=medium
+
+ [changes brought forward from 10.2.5-7.2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 30 Jul 2017 09:48:17 +0000]
+ * Add Raspbian to lists of "debian-like" distros.
+ + Hopefully this will fix site-packages vs dist-packages
+ build failure in Raspbian.
+
+ [changes introduced in 14.2.5-3+rpi1 by Peter Michael Green]
+ * Remove problematic gitattributes files.
+ * Disable neon on armhf too.
+
- -- Raspbian forward porter <root@raspbian.org> Fri, 05 Aug 2022 17:43:48 +0000
++ -- Raspbian forward porter <root@raspbian.org> Sun, 29 Jan 2023 08:59:26 +0000
++
+ ceph (16.2.10+ds-5) unstable; urgency=medium
+
+ [ Thomas Goirand ]
+ * Add adduser as depends for cephadm and ceph-common, fixing piupart run
+ (Closes: #1027175).
+ * CVE-2022-3854: RGW Segmentation fault when requested resource includes a
+ colon. Added upstream patches (Closes: #1027151):
+ - CVE-2022-3854_1_rgw_Guard_against_malformed_bucket_URLs.patch
+ - CVE-2022-3854_2_rgw_Fix_rgw_sal_Bucket_empty_static_method_....patch
+
+ [ Charles Plessy ]
+ * Replace transition package mime-support with media-types
+ (Closes: #1024700).
+
+ -- Thomas Goirand <zigo@debian.org> Mon, 09 Jan 2023 11:41:27 +0100
+
+ ceph (16.2.10+ds-4) unstable; urgency=high
+
+ * CVE-2022-3650: ceph to root privilege escalation via ceph-crash.service.
+ Add upstream patches (Closes: #1024932):
+ - ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch
+ - ceph-crash_fix_stderr_handling.patch
+
+ -- Thomas Goirand <zigo@debian.org> Mon, 28 Nov 2022 12:02:57 +0100
+
+ ceph (16.2.10+ds-3) unstable; urgency=medium
+
+ * Fix mgr modules fail to run due to "PY_SSIZE_T_CLEAN macro must be defined
+ for '#'": add mgr-Define-PY_SSIZE_T_CLEAN-ahead-of-every-Python.h.patch
+ backported from upstream (Closes: #1020489, #1003890).
+ * Fix debian/cephfs-shell.install (it was doing FTBFS with file not found).
+ * Add fix-CheckCxxAtomic-riscv64.patch (Closes: #1018837).
+ * Remove arch-qualifier for libboost-context-dev and libboost-coroutine-dev
+ as Ceph FTBFS without these libs anyways (Closes: #1012489).
+
+ -- Thomas Goirand <zigo@debian.org> Thu, 22 Sep 2022 15:35:37 +0200
ceph (16.2.10+ds-2) unstable; urgency=medium
only-yied-under-armv7-and-above.patch
Fix-build-with-fmt-8-9.patch
fix-FTBFS-include-memory.h.patch
+ mgr-Define-PY_SSIZE_T_CLEAN-ahead-of-every-Python.h.patch
+ fix-CheckCxxAtomic-riscv64.patch
+ CVE-2022-3650_1_ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch
+ CVE-2022-3650_2_ceph-crash_fix_stderr_handling.patch
+ CVE-2022-3854_1_rgw_Guard_against_malformed_bucket_URLs.patch
+ CVE-2022-3854_2_rgw_Fix_rgw_sal_Bucket_empty_static_method_signatures.patch
+detect-raspbian.diff
+remove-problematic-gitattributes-files.patch