[ubuntu/impish-proposed] ceph 16.2.4-0ubuntu1 (Accepted)

[James Page]

ceph (16.2.4-0ubuntu1) impish; urgency=medium

  * d/rules,control: Enable new crimson-osd package and provide
    seastar based crimson-osd binary.
  * SECURITY UPDATE: New upstream release (LP: #1928645):
    - CVE-2021-3509: Dashboard XSS via token cookie.
    - CVE-2021-3531: Swift API denial of service.
    - CVE-2021-3531: HTTP header injects via CORS in RGW.
    - d/p/bug1925347.patch: Drop, included in release.

Date: Tue, 25 May 2021 09:14:52 +0100
Changed-By: James Page <james.page at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/ceph/16.2.4-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 25 May 2021 09:14:52 +0100
Source: ceph
Built-For-Profiles: noudeb
Architecture: source
Version: 16.2.4-0ubuntu1
Distribution: impish
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: James Page <james.page at ubuntu.com>
Launchpad-Bugs-Fixed: 1928645
Changes:
 ceph (16.2.4-0ubuntu1) impish; urgency=medium
 .
   * d/rules,control: Enable new crimson-osd package and provide
     seastar based crimson-osd binary.
   * SECURITY UPDATE: New upstream release (LP: #1928645):
     - CVE-2021-3509: Dashboard XSS via token cookie.
     - CVE-2021-3531: Swift API denial of service.
     - CVE-2021-3531: HTTP header injects via CORS in RGW.
     - d/p/bug1925347.patch: Drop, included in release.
Checksums-Sha1:
 68cc73d86add473e612d17755d18cb5dcacf59be 9809 ceph_16.2.4-0ubuntu1.dsc
 2d95d45df20c963c77f2c71bde43ebd891a9b5ee 104037804 ceph_16.2.4.orig.tar.xz
 656133bb069ea664ee4cbcafa98e04f4f14f5e89 118104 ceph_16.2.4-0ubuntu1.debian.tar.xz
 78c875d6df9b5c902ded9c6827ba41aafa92769b 17261 ceph_16.2.4-0ubuntu1_source.buildinfo
Checksums-Sha256:
 c0af0412c3130fca39d1838d2379ee141b629a5eee8ecf7beb31e5b573a5fc94 9809 ceph_16.2.4-0ubuntu1.dsc
 52cba46896d57febb1697297a573e9e1f79bdb6d07c78ac04ee77e164410fd59 104037804 ceph_16.2.4.orig.tar.xz
 51354aad34cf6ee74ff30db97103b76fce1d0f6fc2756e8c26bfb3aac56dccf2 118104 ceph_16.2.4-0ubuntu1.debian.tar.xz
 87aca5aad2509d27f9597b94d07d8e51ba579920f088edb9efc9904b112a7bff 17261 ceph_16.2.4-0ubuntu1_source.buildinfo
Files:
 43f9b2bfa095effb5aabcb58f8c27b8e 9809 admin optional ceph_16.2.4-0ubuntu1.dsc
 b1428106c5391c7c1ffa5db5bc3c71da 104037804 admin optional ceph_16.2.4.orig.tar.xz
 78505ffc74de0fbf69f16b8b981b8186 118104 admin optional ceph_16.2.4-0ubuntu1.debian.tar.xz
 19e560939d8f92c3740b369d7fb2fcb4 17261 admin optional ceph_16.2.4-0ubuntu1_source.buildinfo
Original-Maintainer: Ceph Packaging Team <team+ceph at tracker.debian.org>