-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 28 Nov 2022 12:02:57 +0100 Source: ceph Architecture: source Version: 16.2.10+ds-4 Distribution: unstable Urgency: high Maintainer: Ceph Packaging Team <team+ceph@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1024932 Changes: ceph (16.2.10+ds-4) unstable; urgency=high . * CVE-2022-3650: ceph to root privilege escalation via ceph-crash.service. Add upstream patches (Closes: #1024932): - ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch - ceph-crash_fix_stderr_handling.patch Checksums-Sha1: bb5a50bd1685cb7b949d5f688e1538f12efe8e1d 8082 ceph_16.2.10+ds-4.dsc 1b76dd257d24f4c42e2f7dd1e78c4aa3bc5eb2dd 120512 ceph_16.2.10+ds-4.debian.tar.xz 98709b60ffef72660648c5d9a09da8d078c8ba26 42428 ceph_16.2.10+ds-4_amd64.buildinfo Checksums-Sha256: 24fefece5694e1f95d9e960e968efeba7f34aa52956711ab0a245ecacc1cf9a2 8082 ceph_16.2.10+ds-4.dsc a041e39205357451399b8b639303345c96cf219216cdfd1c44c8fe0d5e143ab1 120512 ceph_16.2.10+ds-4.debian.tar.xz 3540cf7f2890c8742b5b7658123b00c2fae08a508ca39f0a5fb8afc9e4bbc94d 42428 ceph_16.2.10+ds-4_amd64.buildinfo Files: db81003337f74142ef033d5098b62567 8082 admin optional ceph_16.2.10+ds-4.dsc 31594f2edb4f053577c78c6687fa0bda 120512 admin optional ceph_16.2.10+ds-4.debian.tar.xz bdaeb64239dd0fd96c219c5c2017cb26 42428 admin optional ceph_16.2.10+ds-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmOEvjgACgkQ1BatFaxr Q/4WVg//Yer3DCkTkt5wadWO3PTthZlRgAjCw/uPCtzEmI0bS/W/daFbLZcP1h8W Uevq+yKQUsT6wz0pX1wKUvgMY49sDTLp4oMQAMXIjMRH0eE1lD2TripXVQ1r17wX lV0Tx0/KOZkrdDe79SFJLP/UxRM3/DcnHj4x2a0GPD4oXlV5zoNPXEPkqRAKTrql nklfY+Txi0MvuuyRoCO3Q6f4a+vCmKxQjyljicK5cGX99IxsApQL0vOH9MukLFo2 4YxH6/fMyHXh/+5EKYTaMqLiCcD3UxNdzRedNAfHpMJRUcXAy1kL6l2CDdCmXEKM JQm2bv8OCr6SjrtuUuoPdecAMM0/BV2PvbM6C4rDuvWMVeqTRbzagIAFSU6iHHGc crRntfs8AwjgU06ODJUYY01xZzH3QtduXNu6BQ4oEJem0vObMqowrIBDLl2c0+5G rKqpOkuIAIAXAAT2YfaJoC7CRj0gjdqiUax8rJfrHnr79HFA35byoz93Ki/UqWGD p310pZ+bU8UXbPsll3ryOvIhEvotiBjYoXDYl5SfomZxSuaMvYmxHlXzhvOjzN9W BwdIeJWGiSHeClVAvnmFo+4Y/n96lBRVeQLRYPTi0UsShNcHi9+AH30fNkFXfS0i po0jfxy+Zz5I1MaQ7OYRpYy+Yai47bCHXecGMIZvP313N0ICYoU= =KlUZ -----END PGP SIGNATURE-----