[Bug 1867386] Re: Beast frontend does not allow tuning of maximum backlog of pending connections

[Launchpad Bug Tracker]

This bug was fixed in the package ceph - 14.2.9-0ubuntu0.19.10.1

---------------
ceph (14.2.9-0ubuntu0.19.10.1) eoan; urgency=medium

  [ Tiago Pasqualini da Silva ]
  * d/p/bug1867386: Cherry pick change that adds new configuration
    option in RGW Beast frontend to allow tuning of maximum backlog
    of pending connections (LP: #1867386).

  [ James Page ]
  * New upstream point release (LP: #1878146) including fixes for:
    - CVE-2020-1759: Fixed nonce reuse in msgr V2 secure mode
    - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting

 -- James Page <james.page at ubuntu.com>  Thu, 21 May 2020 08:52:43 +0100

** Changed in: ceph (Ubuntu Eoan)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1759

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1760

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1867386

Title:
  Beast frontend does not allow tuning of maximum backlog of pending
  connections

Status in Ubuntu Cloud Archive:
  Fix Released
Status in Ubuntu Cloud Archive stein series:
  Fix Committed
Status in Ubuntu Cloud Archive train series:
  Fix Committed
Status in Ubuntu Cloud Archive ussuri series:
  Fix Released
Status in ceph package in Ubuntu:
  Fix Released
Status in ceph source package in Disco:
  Won't Fix
Status in ceph source package in Eoan:
  Fix Released
Status in ceph source package in Focal:
  Fix Released

Bug description:
  [Impact]

  Currently, RGW has no option to configure the maximum size for the
  queue of connections waiting to be accepted when using the Beast
  frontend. Instead, it uses the value from
  boost::asio::socket_base::max_connections.

  [Test Case]

  Add the 'max_connection_backlog' config option to the RGW beast
  frontend configuration and check that it is ignored and not used.

  [Regression Potential]

  This change has been reviewed upstream and have been passed through
  the usual upstream ceph QA tests.

  [Other info]

  This bug is similar to 1838109, which reports the same issue but for
  the civetweb frontend.

  Ceph tracker bug: https://tracker.ceph.com/issues/43952
  Upstream PRs:
  https://github.com/ceph/ceph/pull/33053
  https://github.com/ceph/ceph/pull/33340
  https://github.com/ceph/ceph/pull/33341

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1867386/+subscriptions