-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 15 Dec 2025 17:48:10 +0530 Source: ceph Built-For-Profiles: noudeb Architecture: source Version: 14.2.21-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Ceph Packaging Team <team+ceph@tracker.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 1016069 1120797 Changes: ceph (14.2.21-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to check if HTTP_X_AMZ_COPY_SOURCE header is empty. (Fixes: CVE-2024-47866) (Closes: #1120797) * Add patch to fix subvolume discover during upgrade. (Fixes: CVE-2022-0670) (Closes: #1016069) Checksums-Sha1: 12b5c3448634947f58715985a31303b7d3a224d1 5957 ceph_14.2.21-1+deb11u2.dsc fa9070f10c96b7eee086509ac443b84392a55a65 129272778 ceph_14.2.21.orig.tar.gz ed8471b4fa1c9a5ec835080f38cb6e3bc8cffe56 119740 ceph_14.2.21-1+deb11u2.debian.tar.xz 5e2167ea77a3bd2013da5b2ae51a5e1de874d047 11242 ceph_14.2.21-1+deb11u2_source.buildinfo Checksums-Sha256: 83b4e820a05b9cda973b26fe52ecde05921a7d9354db2dc1820a2a4d50163f28 5957 ceph_14.2.21-1+deb11u2.dsc bcedc6a89dd660728b61299e8e12556e3782565c44a75e270016a9736bee0dc2 129272778 ceph_14.2.21.orig.tar.gz b9c4573a2cf4ce4a9020105b9b1b0059a677ab5c9b44c5f7300e0cfe00376c9a 119740 ceph_14.2.21-1+deb11u2.debian.tar.xz 2f89e571b0d111adab1bc5c75e04e1edd594c94c0fa790bbdb90afa4f9ef52ca 11242 ceph_14.2.21-1+deb11u2_source.buildinfo Files: 9d7f620bcd99ad04b6b2f131cd3dd7b1 5957 admin optional ceph_14.2.21-1+deb11u2.dsc 80c75b5421665fd1e412d29ce74313a2 129272778 admin optional ceph_14.2.21.orig.tar.gz b15b4c54578ac53a52f1b0401050b75b 119740 admin optional ceph_14.2.21-1+deb11u2.debian.tar.xz 49420d44a34db482421372627ea3d1e4 11242 admin optional ceph_14.2.21-1+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAml+Z84THHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLliCtD/9GSX9WGvQII1F1AbDOsUhLHh9+iQbO 29kkDYJ7kq4XJrMJCSCgTpQf6mPVXBs0FhVCL5kKJqletVlUkOGw5SrqBzprY3iy cPrayChdYGwEVd4fC1mQ3+2EbAE+mnNgVrgKWDIj5/ur5FJnoF8wVjWp34KmZAFy RTiz+djvhR/vWD/yosYJ1qopv8SOK8kYoKsbmlaiEq/JPSq1Dehowt8Ck/LUBT3a mMO2JMN90gkcJU9c11Xk3rROfw8hTCemIUwbZ7NN1OLqmVuo9ahiNEh35RFKNqZn jDKN/gKk2rYuFPzrUgMMrYoD6jMytukLhc+ue7Id9nLHIRtyd3BDrnwBhDtkXpIA cV40RXf+t1k3pQI1aljytpeDQUL0OzFiA+vo826L/Ovn3TJxkxdLsnnQuh1P36Vg Cp8ecWmBpax/DfFaYgPW58krDtwHE9y+UpCHWM+Twh3cmXjV2lEfR1siCBa9z4jA YAFHdyrW9R1hGpTEL5GwdS5Yzw6SvjOTY7gXeWVENTBBkZnStPPanMKS62cXcWio p61cD9BHxdigyi+3nPkpmzS5GkEfXvigKqwvQpxRqK1jojb63e7KMGqvMuBL9J3+ CwUZIxeu4v8Nd5Z41LAxZtJUx3LWao8kewnY6GwdIbpYSPCPTZNT6KqZtljeD51b NjIlMxsID86aUg== =HHdu -----END PGP SIGNATURE-----
