-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 08 Apr 2020 12:50:12 +0100 Source: ceph Binary: ceph ceph-dbg ceph-common ceph-common-dbg ceph-mds ceph-mds-dbg ceph-fuse ceph-fuse-dbg rbd-fuse rbd-fuse-dbg ceph-fs-common ceph-fs-common-dbg ceph-resource-agents librados2 librados2-dbg librados-dev librbd1 librbd1-dbg librbd-dev libcephfs1 libcephfs1-dbg libcephfs-dev radosgw radosgw-dbg rest-bench rest-bench-dbg ceph-test ceph-test-dbg python-ceph libcephfs-java libcephfs-jni libcephfs-jni-dbg Architecture: source amd64 all Version: 0.80.7-2+deb8u4 Distribution: jessie-security Urgency: high Maintainer: Ceph Maintainers <ceph-maintainers@lists.ceph.com> Changed-By: Chris Lamb <lamby@debian.org> Description: ceph - distributed storage and file system ceph-common - common utilities to mount and interact with a ceph storage cluste ceph-common-dbg - debugging symbols for ceph-common ceph-dbg - debugging symbols for ceph ceph-fs-common - common utilities to mount and interact with a ceph file system ceph-fs-common-dbg - debugging symbols for ceph-fs-common ceph-fuse - FUSE-based client for the Ceph distributed file system ceph-fuse-dbg - debugging symbols for ceph-fuse ceph-mds - metadata server for the ceph distributed file system ceph-mds-dbg - debugging symbols for ceph-mds ceph-resource-agents - OCF-compliant resource agents for Ceph ceph-test - Ceph test and benchmarking tools ceph-test-dbg - debugging symbols for ceph-test libcephfs-dev - Ceph distributed file system client library (development files) libcephfs-java - Java library for the Ceph File System libcephfs-jni - Java Native Interface library for CephFS Java bindings libcephfs-jni-dbg - debugging symbols for libcephfs-jni libcephfs1 - Ceph distributed file system client library libcephfs1-dbg - debugging symbols for libcephfs1 librados-dev - RADOS distributed object store client library (development files) librados2 - RADOS distributed object store client library librados2-dbg - debugging symbols for librados2 librbd-dev - RADOS block device client library (development files) librbd1 - RADOS block device client library librbd1-dbg - debugging symbols for librbd1 python-ceph - Python libraries for the Ceph distributed filesystem radosgw - REST gateway for RADOS distributed object store radosgw-dbg - debugging symbols for radosgw rbd-fuse - FUSE-based rbd client for the Ceph distributed file system rbd-fuse-dbg - debugging symbols for rbd-fuse rest-bench - RESTful bencher that can be used to benchmark radosgw performance rest-bench-dbg - debugging symbols for rest-bench Closes: 956142 Changes: ceph (0.80.7-2+deb8u4) jessie-security; urgency=high . * CVE-2020-1760: Prevent a header-splitting vulnerability that could lead to a possible XSS exploit. (Closes: #956142) Checksums-Sha1: a1c21f1005194dfa4fadac4bda2bef60a11d5b60 4411 ceph_0.80.7-2+deb8u4.dsc 3db33986291c8fc8fb572099ec2915690d88512b 4036009 ceph_0.80.7.orig.tar.bz2 f36e26be9704c2caa3ba372ecea04348c5c1abed 51372 ceph_0.80.7-2+deb8u4.debian.tar.xz a6609df5eb24900a10b684f76b4adb49be717855 5403540 ceph_0.80.7-2+deb8u4_amd64.deb f0c13887ab3105a2472db5ad8d83e12e85754f95 95225554 ceph-dbg_0.80.7-2+deb8u4_amd64.deb 502954d99f4e6037fe9b7f4fe43a2dd5be358e18 4459050 ceph-common_0.80.7-2+deb8u4_amd64.deb c7fb924cc83df84c9c034e04ee7e5a5830c479bd 69687458 ceph-common-dbg_0.80.7-2+deb8u4_amd64.deb 34be6df2b8053088ac5fc8f64383dfa642cd7a50 2215178 ceph-mds_0.80.7-2+deb8u4_amd64.deb 3ab8431ddd2e103f141a39f7175218b0655a65c9 34725616 ceph-mds-dbg_0.80.7-2+deb8u4_amd64.deb 7e2958152465010e7bf5ea0e8d41e9e8482d1097 1406626 ceph-fuse_0.80.7-2+deb8u4_amd64.deb b3d56a914496a6d009d7f39d14cb1082ab75a8cc 18330996 ceph-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 87d4bc10bb97ed600ab2745ca0c4ec27d7616ccd 26412 rbd-fuse_0.80.7-2+deb8u4_amd64.deb 7fc80f5aaa934a397bb9cf9e5b70cf9faf3c8919 34084 rbd-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 115afda91b28c38a09fa71bb61de720869bca477 39292 ceph-fs-common_0.80.7-2+deb8u4_amd64.deb eb98dfc030237f9b475794e295340f114cf2b94d 82756 ceph-fs-common-dbg_0.80.7-2+deb8u4_amd64.deb 0d56518d79b4fbe418c71d889ea6d02f8bde9416 21550 ceph-resource-agents_0.80.7-2+deb8u4_all.deb afddb7325ecbf393138e96389b82505d692308fe 1598908 librados2_0.80.7-2+deb8u4_amd64.deb a15d2017820899162d6327c7ff4b28618ee12c84 20687012 librados2-dbg_0.80.7-2+deb8u4_amd64.deb 282dd3f9f433d2faffee48a00cd430c5392efc38 1841900 librados-dev_0.80.7-2+deb8u4_amd64.deb a1bab29ece2ff7b0944c149e4799a1fe7bc33028 361832 librbd1_0.80.7-2+deb8u4_amd64.deb 1aae5150e3a06d1389fc96adc1490d69628067e8 4733802 librbd1-dbg_0.80.7-2+deb8u4_amd64.deb 600ed4a3d9c2baf58a66ebb1e0cb6afa67aca9f3 5300816 librbd-dev_0.80.7-2+deb8u4_amd64.deb 7e7f2fbbe2197eb41658ce053256bc5eaefb2f16 1689038 libcephfs1_0.80.7-2+deb8u4_amd64.deb d68d57b1aafafee680b3ed3d8e45ed6ad6ecfc50 21138906 libcephfs1-dbg_0.80.7-2+deb8u4_amd64.deb 15d92e776837498c78caec80ba97101b87bf1e70 24311878 libcephfs-dev_0.80.7-2+deb8u4_amd64.deb d78458a62e786b4ac0b2a1b117899186e0961718 1048102 radosgw_0.80.7-2+deb8u4_amd64.deb f3a0fa66713d8c11b1660d21f0831031d596892e 18114344 radosgw-dbg_0.80.7-2+deb8u4_amd64.deb 87ef1bcf9c3140e691bfade2de35fda566ffcd08 352842 rest-bench_0.80.7-2+deb8u4_amd64.deb e4793015db56aac4ef2398424275a17735c06d18 4662898 rest-bench-dbg_0.80.7-2+deb8u4_amd64.deb c4983f1e714810bd1eb07875d5152373a37649cb 17453558 ceph-test_0.80.7-2+deb8u4_amd64.deb 5be7ae053e9cf3122a0f4df407a730634f3df6f0 323449088 ceph-test-dbg_0.80.7-2+deb8u4_amd64.deb 6d0ca81588a9512fb89aa9e987fe93497003dad3 49112 python-ceph_0.80.7-2+deb8u4_amd64.deb 2d94b14d547e0e6858f5d250bbe19c300eaa2d80 26860 libcephfs-java_0.80.7-2+deb8u4_all.deb c5b3b5043ee2aa1903b540b94b9fa550dda8edd2 47184 libcephfs-jni_0.80.7-2+deb8u4_amd64.deb e0dd115bd0a14d11e9fae02f29d03375cc3a2f10 274928 libcephfs-jni-dbg_0.80.7-2+deb8u4_amd64.deb Checksums-Sha256: a96b7e968b05a94d74044717c33798f470d28a285f824e7faf86b5aafe3bb4d6 4411 ceph_0.80.7-2+deb8u4.dsc d895a285d0b89c3fb3922874a925d809c3c00b296cc639d108a500942888f2a4 4036009 ceph_0.80.7.orig.tar.bz2 80806b7763b81f6c3ace5c023965e2bb82068576a5e73ad22a36b428f2286b5c 51372 ceph_0.80.7-2+deb8u4.debian.tar.xz 16e4535cb3ac2cb415208bbe7784bb6c0610d267c44050350f2798678f7b3f5b 5403540 ceph_0.80.7-2+deb8u4_amd64.deb 372dcf77f146c2edfcaa50be9e9849a31538c18c8a256081f88b692f85b1ad03 95225554 ceph-dbg_0.80.7-2+deb8u4_amd64.deb 7f037b79820d186764428c011f58831c42502e9a86749384aded2ae982f983b1 4459050 ceph-common_0.80.7-2+deb8u4_amd64.deb 251567b203718e01137f08d5664e5eec06dd619ca198a5c55555d714e881d0f7 69687458 ceph-common-dbg_0.80.7-2+deb8u4_amd64.deb 2de69ab53abfc13e050ea8223dbdfe2141558b5e59ac8e1d2e0d3f291d63f659 2215178 ceph-mds_0.80.7-2+deb8u4_amd64.deb 94ec3f26f55785dbbb8497721fb36ae7103ca48f417f69f04ad3690184f4090b 34725616 ceph-mds-dbg_0.80.7-2+deb8u4_amd64.deb f1cf96954a5e32db5c288ce2a18a6f3fba7f37af15ac7af808553d5425604fd7 1406626 ceph-fuse_0.80.7-2+deb8u4_amd64.deb 6290891a7cb18f251d895efb0c56a6a25f17d7cdbbe50b4a49fc84e0a74d7860 18330996 ceph-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 93563ef06a26a69482063d547642022b10336ffd1eff4957b041a516a5d9e19c 26412 rbd-fuse_0.80.7-2+deb8u4_amd64.deb 5a12870b7247eb60d54a127a3f81ae64b0bbb6216a71fae72dce430731db6161 34084 rbd-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 61df7fa7f8e6379e0b97bec279c223fdb185992f2be57d9f908a113d4a0e975a 39292 ceph-fs-common_0.80.7-2+deb8u4_amd64.deb bcf437dd85a10bd25a11fbfc6ba0e6f35024a40b71d8e95599a604b5ca9c3c8c 82756 ceph-fs-common-dbg_0.80.7-2+deb8u4_amd64.deb 9d506decb7c1f8e16fd862b8a883fc7cad42df5d4eaaaee1c6baef726c980604 21550 ceph-resource-agents_0.80.7-2+deb8u4_all.deb 2dc0868eb9b60635add5b7d4d83d8607c7f3bcc8a22636ee46363d9dce7418f2 1598908 librados2_0.80.7-2+deb8u4_amd64.deb 4ec9209373f111b8e82bffb2882728441a09df9baece4e854ed07e124f5711af 20687012 librados2-dbg_0.80.7-2+deb8u4_amd64.deb 3f4e69534b984840af325f80d16f70f8222e40a3d858eb975a532cb451107331 1841900 librados-dev_0.80.7-2+deb8u4_amd64.deb 5cf009f746347c848491d786973c191a13a594b4a2907da8b891369d3b5e94b0 361832 librbd1_0.80.7-2+deb8u4_amd64.deb f6c6cfe7e95cd3dd679303ca0ac1d882ace73ae2ba62a880d7d3ca58db5094de 4733802 librbd1-dbg_0.80.7-2+deb8u4_amd64.deb 57dce6ff99e3bb2baded0d4e21fe1e634675e99b583651b98116406397bddfe3 5300816 librbd-dev_0.80.7-2+deb8u4_amd64.deb 3b2a9c02235453b62d1e574b19e9ab0c8565b23a965c24c51c505027c7ad53ed 1689038 libcephfs1_0.80.7-2+deb8u4_amd64.deb 6a0427ce1718e4495299aa8ba00837672cb2ecdf16c1bb2a0f65b0edd77f3295 21138906 libcephfs1-dbg_0.80.7-2+deb8u4_amd64.deb 9db189a60d50ecef6951ea7ff7429ce0521a5408af2ddfbed0e272d654284f93 24311878 libcephfs-dev_0.80.7-2+deb8u4_amd64.deb 6da1bda9bd0ed582119e93208e794b281b1ecd4fd7f5310f4233f47a11606027 1048102 radosgw_0.80.7-2+deb8u4_amd64.deb 94f091a9c7da232e0772aae89cbbd1ab8805e6e343806120029c67f7c3305950 18114344 radosgw-dbg_0.80.7-2+deb8u4_amd64.deb dcf90d4cec6e4ee0d3c2652109fcca003a98ba6229798c780c8b15b0222b4d5c 352842 rest-bench_0.80.7-2+deb8u4_amd64.deb 0d7e21f6e35e08d47cd6ec18f35c74a62e99b5c3475d4e5d3096796ab3c3499d 4662898 rest-bench-dbg_0.80.7-2+deb8u4_amd64.deb 47bd36e4dfb55db304327dad20a68c7ca11a030ddb6c771058531ac71b370f3c 17453558 ceph-test_0.80.7-2+deb8u4_amd64.deb 14f354da4de7d0f5c01f2a622c80ac30a6e2eb4036f35261891f3a8fa6b73b13 323449088 ceph-test-dbg_0.80.7-2+deb8u4_amd64.deb e04614f1e322a5fe91e603fc28a91d87a6539dc9ca907020664b350aabf48491 49112 python-ceph_0.80.7-2+deb8u4_amd64.deb 81a4624caed3b656489350d3a8a1928cce013ae6a958fe1f5964b2f71d904919 26860 libcephfs-java_0.80.7-2+deb8u4_all.deb d004c4bb12d58c9d8fef7fa220a84787709125ee725c3598e922810ce9f01ee0 47184 libcephfs-jni_0.80.7-2+deb8u4_amd64.deb 9c25b2dd39bf13076bdafa317e719ca43ea5c429f0fc5ca6802f0486107daab1 274928 libcephfs-jni-dbg_0.80.7-2+deb8u4_amd64.deb Files: 553aa0bce95f96f64a1b569564cb85f1 4411 admin optional ceph_0.80.7-2+deb8u4.dsc dc7e46b5804fd5fdb8796416b914c4be 4036009 admin optional ceph_0.80.7.orig.tar.bz2 86be895f11165affeadc9830311b4268 51372 admin optional ceph_0.80.7-2+deb8u4.debian.tar.xz c0476e93d3e473c6ddc21a79ed9d1174 5403540 admin optional ceph_0.80.7-2+deb8u4_amd64.deb 446ffb084435b768a08b0c567f546ac7 95225554 debug extra ceph-dbg_0.80.7-2+deb8u4_amd64.deb bb2e1777e4ba6fc6709c1faf291f7684 4459050 admin optional ceph-common_0.80.7-2+deb8u4_amd64.deb ddef12867f9a56c2249f97c23130067f 69687458 debug extra ceph-common-dbg_0.80.7-2+deb8u4_amd64.deb 7c2d5335ef311b3740cd6bfcfa035255 2215178 admin optional ceph-mds_0.80.7-2+deb8u4_amd64.deb 6a7b2ed79dfc61af721193f71fe019f7 34725616 debug extra ceph-mds-dbg_0.80.7-2+deb8u4_amd64.deb 3ba20fbdec6bf667fb77bfff0fab0cba 1406626 admin optional ceph-fuse_0.80.7-2+deb8u4_amd64.deb 9c70dab5a96f7d9242d9e26b4062d6bc 18330996 debug extra ceph-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 80403e5efed40f86658cadc935b137e5 26412 admin optional rbd-fuse_0.80.7-2+deb8u4_amd64.deb 8a452c94f943aa56eb2c50fc98bab33c 34084 debug extra rbd-fuse-dbg_0.80.7-2+deb8u4_amd64.deb 585f7870617fc387ed840bcdfb6537a4 39292 admin optional ceph-fs-common_0.80.7-2+deb8u4_amd64.deb 0f65dc8be1edb3a8df354cc70a602e0f 82756 debug extra ceph-fs-common-dbg_0.80.7-2+deb8u4_amd64.deb 45c0de2115e9a7d411947aeec97edce9 21550 admin extra ceph-resource-agents_0.80.7-2+deb8u4_all.deb 0377f697c59f54c801aff01b5792160a 1598908 libs optional librados2_0.80.7-2+deb8u4_amd64.deb 2c57380f9c652784a54f152d126799ae 20687012 debug extra librados2-dbg_0.80.7-2+deb8u4_amd64.deb 233bd3500b2e8de93cc56516e27fd9be 1841900 libdevel optional librados-dev_0.80.7-2+deb8u4_amd64.deb b1cde7ce15a530733bf3b0a953574e85 361832 libs optional librbd1_0.80.7-2+deb8u4_amd64.deb a439f4ad1b5d943e1da44b7dab8ff564 4733802 debug extra librbd1-dbg_0.80.7-2+deb8u4_amd64.deb 56b511b77bd429a05fd6d5e8ad37daa8 5300816 libdevel optional librbd-dev_0.80.7-2+deb8u4_amd64.deb 07e05d79eb73433b99b6f45516a17e64 1689038 libs optional libcephfs1_0.80.7-2+deb8u4_amd64.deb 26db6bf4df6a51b528b71d295441d5ee 21138906 debug extra libcephfs1-dbg_0.80.7-2+deb8u4_amd64.deb 6978687c75d0a79da01b407f7bc01432 24311878 libdevel optional libcephfs-dev_0.80.7-2+deb8u4_amd64.deb 05fcdced31ba15e8319d039cf73c7800 1048102 admin optional radosgw_0.80.7-2+deb8u4_amd64.deb 489e508c77a2e1a2aecf0f1abcd8d83d 18114344 debug extra radosgw-dbg_0.80.7-2+deb8u4_amd64.deb 18e38865ebf28c88abe6d80a6fd7afe7 352842 admin optional rest-bench_0.80.7-2+deb8u4_amd64.deb 03600409dddf1bee49383e87641be932 4662898 debug extra rest-bench-dbg_0.80.7-2+deb8u4_amd64.deb 9b7a6652633e6d82309bb2c6839ea636 17453558 admin optional ceph-test_0.80.7-2+deb8u4_amd64.deb a1a1336016033f183760ae1df020246a 323449088 debug extra ceph-test-dbg_0.80.7-2+deb8u4_amd64.deb 10a3ab8cdefe56346f17ec39d2bbfd94 49112 python optional python-ceph_0.80.7-2+deb8u4_amd64.deb 0e9147597c3ac29cb3072946fe4e9e2a 26860 java optional libcephfs-java_0.80.7-2+deb8u4_all.deb 4ff6009fb834023ece12cd95fa50e3fc 47184 libs optional libcephfs-jni_0.80.7-2+deb8u4_amd64.deb 5a14de98d9d0b19dbea097000ef7a441 274928 debug extra libcephfs-jni-dbg_0.80.7-2+deb8u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl6PBwEACgkQHpU+J9Qx HliVdg/6AkQRIiTUI3jv5YmVeDZMTgyh05TUtGoh9ia2kEsGR/xkKFw0cXI311wq o0aehdo/tWldXM+XeMj6WaPoNR2M+ZzUNUlKVnjdzXVR0F4Wcz5XbXD8BigfoMmb NRCfLgmrvVxzqaCeOlf8e3kE6WwCzS3KLS8xVLjFyoqMN1lDdvAjI8sqVJdjr4o3 vuYs/JW+24EeZ+qsiJ7L3MZOuv3HCYRuAPQ2YWh/ojwXDoI2eO31SqoDiJPairVj GsUGZ7dyPudzVg8l/imCAp/r2ILrJzE8HtPYgQMmSkFlClijPPPk4cx93CRuNkKk IMJVTjkfb/yjndx/zkMCny8SDw4LDBSY/iUy0+dMoGQZscBxCv7gwY4hhjmc+Hoy pWIrh5IndQ9tPfuYh8FgFreQN9qrKl4Gcpi4fJMaU5l3GKtBlIwJ6pjqYVZsz0rs JXmEUbZhrFUf1gqFmDuEsfLVhly4eTpU9N/RDeC/2FCSdqoAwniwHna0kFuRbVyy IDYRn9X1Q1ub/pKJecx4ZXIczM3S/vCqhvZhJw6igPfEMpPrlGdYc3gVB/pIOkQo IQvB0KtVoC+h+C13S/sD+ybvfhYr2k8sV7rTkzmBOseNJvJf4U2Xvqil7GNwJzq3 ABaXaHoPnFWvzGNtjTCeI0WTOJXL/j4Fw9oMGVMFYiL3xbbvtEE= =I/P3 -----END PGP SIGNATURE-----