[Bug 2166817] Re: [SRU] ceph 20.2.4

[Matthew Ruffell]

** Also affects: ceph (Ubuntu Resolute)
   Importance: Undecided
       Status: New

** Also affects: ceph (Ubuntu Stonking)
   Importance: Undecided
       Status: New

** Changed in: ceph (Ubuntu Resolute)
   Importance: Undecided => Medium

** Changed in: ceph (Ubuntu Stonking)
   Importance: Undecided => Medium

** Changed in: ceph (Ubuntu Resolute)
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ceph in Ubuntu.
https://bugs.launchpad.net/bugs/2166817

Title:
  [SRU] ceph 20.2.4

Status in ceph package in Ubuntu:
  In Progress
Status in ceph source package in Resolute:
  In Progress
Status in ceph source package in Stonking:
  In Progress

Bug description:
  [Impact]
  This release fixes several security-related bugs. We would like to make sure all of our users have access to these improvements.

  The update contains the following package updates:
     * ceph 20.2.4 https://docs.ceph.com/en/latest/releases/tentacle/#v20-2-4-tentacle

  Notable changes:
     * The CVEs 2025-30156, 2026-39944, 2026-50152 and 2026-54330 have been fixed. These are all security-critical and impact any clients that make use of cephx keys.

  [Test Case]

  This SRU will run all functional tests with the packages in 'proposed'
  for every Ceph charm maintained by Canonical's Ceph team, so that
  there's a higher chance of catching bugs associated with any Ceph
  component.

  The charms for which the functional tests will be run are: ceph-mon,
  ceph-osd, ceph-radosgw, ceph-proxy, ceph-nfs, ceph-nvme, ceph-fs and
  ceph-rbd-mirror.

  The functional test suite includes upgrade testing from the current
  stable release to the proposed (in this case, from 20.2.1 to 20.2.4)

  [Regression Potential]

  ceph is a critical package as it underpins large scale data storage
  and integrity checking, and care must be taken to not introduce any
  data loss regressions. ceph also is a common backing store for
  OpenStack virtual machines through ceph-rbd, and care must be taken to
  not break any API or ABI compatibility with current OpenStack
  releases.

  In order to mitigate the regression potential, the results of the
  aforementioned tests will be attached to this bug.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/2166817/+subscriptions