[ubuntu/bionic-security] ceph 12.2.12-0ubuntu0.18.04.5 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Mar 17 12:22:20 UTC 2020
ceph (12.2.12-0ubuntu0.18.04.5) bionic-security; urgency=medium
* SECURITY UPDATE: DoS via RGW Beast front-end unexpected disconnects
- debian/patches/CVE-2020-1700.patch: avoid leaking connections in
src/rgw/rgw_asio_frontend.cc.
- CVE-2020-1700
ceph (12.2.12-0ubuntu0.18.04.4) bionic; urgency=medium
[ Billy Olsen ]
* Do not validate fs caps on authorize (LP: #1847822):
- d/p/dont-validate-fs-caps-on-authorize.patch: Do not validate
the filesystem caps with a new client connection to the monitor
when authorizing a client connection.
[ Dan Hill ]
* d/p/issue38454.patch: Cherry pick of fixes for misc RGW bugs
and cleanup of garbage collection code (LP: #1843085).
[ Dariusz Gadomski ]
* d/p/issue37490.patch: Cherry pick fix to optimize LVM queries
in ceph-volume, resolving performance issues in systems under
heavy load or with large numbers of disks (LP: #1850754).
ceph (12.2.12-0ubuntu0.18.04.3) bionic; urgency=medium
[ James Page ]
* d/p/ceph-volume-wait-for-lvs.patch: Cherry pick inflight fix to
ensure that required wal and db devices are present before
activating OSD's (LP: #1828617).
[ Jesse Williamson ]
* d/p/civetweb-755-1.8-somaxconn-configurable*.patch: Backport changes
to civetweb to allow tuning of SOMAXCONN in Ceph RADOS Gateway
deployments (LP: #1838109).
[ James Page ]
* d/p/rgw-gc-use-aio.patch: Cherry pick fix to switch to using AIO for
garbage collection of objects in the Ceph RADOS Gateway
(LP: #1838858).
[ Eric Desrochers ]
* Ensure that daemons are not automatically restarted during package
upgrades (LP: #1840347):
- d/rules: Use "--no-restart-after-upgrade" and "--no-stop-on-upgrade"
instead of "--no-restart-on-upgrade".
- d/rules: Drop exclusion for ceph-[osd,mon,mds] for restarts.
Date: 2020-02-11 13:05:26.331911+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/ceph/12.2.12-0ubuntu0.18.04.5
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list