[Bug 1878146] Re: [SRU] ceph 14.2.9

[Launchpad Bug Tracker]

This bug was fixed in the package ceph - 14.2.9-0ubuntu0.19.10.1

---------------
ceph (14.2.9-0ubuntu0.19.10.1) eoan; urgency=medium

  [ Tiago Pasqualini da Silva ]
  * d/p/bug1867386: Cherry pick change that adds new configuration
    option in RGW Beast frontend to allow tuning of maximum backlog
    of pending connections (LP: #1867386).

  [ James Page ]
  * New upstream point release (LP: #1878146) including fixes for:
    - CVE-2020-1759: Fixed nonce reuse in msgr V2 secure mode
    - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting

 -- James Page <james.page at ubuntu.com>  Thu, 21 May 2020 08:52:43 +0100

** Changed in: ceph (Ubuntu Eoan)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1878146

Title:
  [SRU] ceph 14.2.9

Status in Ubuntu Cloud Archive:
  Invalid
Status in Ubuntu Cloud Archive train series:
  Fix Committed
Status in ceph package in Ubuntu:
  Invalid
Status in ceph source package in Eoan:
  Fix Released

Bug description:
  [Impact]
  This release sports mostly bug-fixes but also two security fixes and we would like to make sure all of our supported customers have access to these improvements.

  The update contains the following package updates:

     * ceph 14.2.9

  [Test Case]
  The following SRU process was followed:

    https://wiki.ubuntu.com/OpenStack/StableReleaseUpdates

  In order to avoid regression of existing consumers, the OpenStack team
  will run their continuous integration test against the packages that
  are in -proposed. A successful run of all available tests will be
  required before the proposed packages can be let into -updates.

  The OpenStack team will be in charge of attaching the output summary
  of the executed tests. The OpenStack team members will not mark
  ‘verification-done’ until this has happened.

  [Regression Potential]
  In order to mitigate the regression potential, the results of the aforementioned tests are attached to this bug.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1878146/+subscriptions