ceph (10.2.11-0ubuntu0.16.04.2) xenial-security; urgency=medium
* SECURITY UPDATE: incorrect permissions on dm-crypt keys
- debian/patches/CVE-2018-14662.patch: limit caps allowed to access the
store in qa/suites/rados/singleton/all/mon-config-key-caps.yaml,
qa/workunits/mon/test_config_key_caps.sh, src/mon/MonCap.cc.
- CVE-2018-14662
* SECURITY UPDATE: DoS against OMAPs holding bucket indices
- debian/patches/CVE-2018-16846-pre1.patch: enforce bounds on
max-keys/max-uploads/max-parts in src/rgw/rgw_op.cc,
src/rgw/rgw_op.h, src/rgw/rgw_rest.cc, src/rgw/rgw_rest_swift.cc,
src/common/config_opts.h.
- debian/patches/CVE-2018-16846.patch: fix issues with 'enforce bounds'
patch in src/rgw/rgw_op.cc, src/rgw/rgw_op.h, src/rgw/rgw_rest.cc.
- CVE-2018-16846
Date: 2019-06-01 20:40:12.623224+00:00
Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/ceph/10.2.11-0ubuntu0.16.04.2
Sorry, changesfile not available.
--
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
