Publishing details
Changelog
ceph (17.2.5-0ubuntu0.22.04.3) jammy-security; urgency=medium
* SECURITY UPDATE: privilege escalation via ceph crash service
- debian/patches/CVE-2022-3650-1.patch: re-add unused frame in
handler() in src/ceph-crash.in.
- debian/patches/CVE-2022-3650-2.patch: fix some flake8 issues in
src/ceph-crash.in.
- debian/patches/CVE-2022-3650-3.patch: fix stderr handling in
src/ceph-crash.in.
- debian/patches/CVE-2022-3650-4.patch: drop privleges to run as "ceph"
user, rather than root in src/ceph-crash.in.
- debian/patches/CVE-2022-3650-5.patch: chown crash files to ceph user
in qa/workunits/rados/test_crash.sh.
- debian/patches/CVE-2022-3650-6.patch: log warning if crash directory
unreadable in src/ceph-crash.in.
- CVE-2022-3650
* This also fixes CVE-2022-0670 and CVE-2022-3854 in the -security
pocket.
-- Marc Deslauriers <email address hidden> Wed, 19 Apr 2023 18:59:11 -0400
Builds
Built packages
-
ceph
distributed storage and file system
-
ceph-base
common ceph daemon libraries and management tools
-
ceph-base-dbgsym
debug symbols for ceph-base
-
ceph-common
common utilities to mount and interact with a ceph storage cluster
-
ceph-common-dbgsym
debug symbols for ceph-common
-
ceph-fuse
FUSE-based client for the Ceph distributed file system
-
ceph-fuse-dbgsym
debug symbols for ceph-fuse
-
ceph-grafana-dashboards
Grafana dashboards for the Ceph dashboard
-
ceph-immutable-object-cache
Ceph daemon for immutable object cache
-
ceph-immutable-object-cache-dbgsym
debug symbols for ceph-immutable-object-cache
-
ceph-mds
metadata server for the ceph distributed file system
-
ceph-mds-dbgsym
debug symbols for ceph-mds
-
ceph-mgr
manager for the ceph distributed file system
-
ceph-mgr-cephadm
cephadm orchestrator module for ceph-mgr
-
ceph-mgr-dashboard
dashboard module for ceph-mgr
-
ceph-mgr-dbgsym
debug symbols for ceph-mgr
-
ceph-mgr-diskprediction-local
diskprediction-local module for ceph-mgr
-
ceph-mgr-k8sevents
kubernetes events module for ceph-mgr
-
ceph-mgr-modules-core
ceph manager modules which are always enabled
-
ceph-mgr-rook
rook module for ceph-mgr
-
ceph-mon
monitor server for the ceph storage system
-
ceph-mon-dbgsym
debug symbols for ceph-mon
-
ceph-osd
OSD server for the ceph storage system
-
ceph-osd-dbgsym
debug symbols for ceph-osd
-
ceph-prometheus-alerts
Prometheus alerts for the Ceph dashboard
-
ceph-resource-agents
OCF-compliant resource agents for Ceph
-
ceph-volume
tool to facilidate OSD deployment
-
cephadm
cephadm utility to bootstrap ceph daemons with systemd and containers
-
cephfs-shell
interactive shell for the Ceph distributed file system
-
crimson-osd
Crimson OSD server for the ceph storage system
-
crimson-osd-dbgsym
debug symbols for crimson-osd
-
libcephfs-dev
Ceph distributed file system client library (development files)
-
libcephfs-java
Java library for the Ceph File System
-
libcephfs-jni
Java Native Interface library for CephFS Java bindings
-
libcephfs-jni-dbgsym
debug symbols for libcephfs-jni
-
libcephfs2
Ceph distributed file system client library
-
libcephfs2-dbgsym
debug symbols for libcephfs2
-
librados-dev
RADOS distributed object store client library (development files)
-
librados-dev-dbgsym
debug symbols for librados-dev
-
librados2
RADOS distributed object store client library
-
librados2-dbgsym
debug symbols for librados2
-
libradospp-dev
RADOS distributed object store client C++ library (development files)
-
libradosstriper-dev
RADOS striping interface (development files)
-
libradosstriper1
RADOS striping interface
-
libradosstriper1-dbgsym
debug symbols for libradosstriper1
-
librbd-dev
RADOS block device client library (development files)
-
librbd1
RADOS block device client library
-
librbd1-dbgsym
debug symbols for librbd1
-
librgw-dev
RADOS client library (development files)
-
librgw2
RADOS Gateway client library
-
librgw2-dbgsym
debug symbols for librgw2
-
libsqlite3-mod-ceph
SQLite3 VFS for Ceph
-
libsqlite3-mod-ceph-dbgsym
debug symbols for libsqlite3-mod-ceph
-
libsqlite3-mod-ceph-dev
SQLite3 VFS for Ceph (development files)
-
python3-ceph
Meta-package for all Python 3.x modules for the Ceph libraries
-
python3-ceph-argparse
Python 3 utility libraries for Ceph CLI
-
python3-ceph-common
Python 3 utility libraries for Ceph
-
python3-cephfs
Python 3 libraries for the Ceph libcephfs library
-
python3-cephfs-dbgsym
debug symbols for python3-cephfs
-
python3-rados
Python 3 libraries for the Ceph librados library
-
python3-rados-dbgsym
debug symbols for python3-rados
-
python3-rbd
Python 3 libraries for the Ceph librbd library
-
python3-rbd-dbgsym
debug symbols for python3-rbd
-
python3-rgw
Python 3 libraries for the Ceph librgw library
-
python3-rgw-dbgsym
debug symbols for python3-rgw
-
rados-objclass-dev
RADOS object class development kit.
-
radosgw
REST gateway for RADOS distributed object store
-
radosgw-dbgsym
debug symbols for radosgw
-
rbd-fuse
FUSE-based rbd client for the Ceph distributed file system
-
rbd-fuse-dbgsym
debug symbols for rbd-fuse
-
rbd-mirror
Ceph daemon for mirroring RBD images
-
rbd-mirror-dbgsym
debug symbols for rbd-mirror
-
rbd-nbd
NBD-based rbd client for the Ceph distributed file system
-
rbd-nbd-dbgsym
debug symbols for rbd-nbd
Package files