ceph (16.2.15+ds-0+deb12u2) bookworm-security; urgency=high
* Non-maintainer upload by the Security Team.
* mgr/alerts: enforce ssl context to SMTP_SSL (CVE-2024-31884)
(Closes: #
1126573)
* Check if `HTTP_X_AMZ_COPY_SOURCE` header is empty (CVE-2024-47866)
(Closes: #
1120797)
* client: disallow unprivileged users to escalate root privileges
(CVE-2025-52555) (Closes: #
1108410)
* client: prohibit unprivileged users from setting sgid/suid bits
[dgit import unpatched ceph 16.2.15+ds-0+deb12u2]