[ubuntu-cloud-archive/rocky-proposed] ceph (Accepted)

[Corey Bryant]

 ceph (13.2.4+dfsg1-0ubuntu0.18.10.2~cloud0) bionic-rocky; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 ceph (13.2.4+dfsg1-0ubuntu0.18.10.2) cosmic-security; urgency=medium
 .
   * SECURITY UPDATE: encryption key leak in log
     - debian/patches/CVE-2018-16889.patch: sanitize customer encryption
       keys from log output in src/rgw/rgw_auth_s3.cc,
       src/rgw/rgw_rest_s3.cc.
     - CVE-2018-16889
   * SECURITY UPDATE: civetweb file descriptor leak
     - debian/patches/CVE-2019-3821.patch: properly close connection in
       src/civetweb/src/civetweb.c.
     - CVE-2019-3821

Date: Tue, 25 Jun 2019 12:45:47 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>