Debian Package Tracker

general

source: ceph (main)
version: 10.2.5-7.2
maintainer: Ceph Maintainers [DMD]
uploaders: Gaudenz Steinlin [DMD] – James Page [DMD]
arch: all
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-bpo: 0.80.7-1~bpo70+1
oldstable: 0.80.7-2+deb8u2
old-bpo: 10.2.5-6~bpo8+1
stable: 10.2.5-7.2
testing: 10.2.5-7.2
unstable: 10.2.5-7.2
exp: 10.2.7-0exp1

versioned links

0.80.7-1~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.80.7-2+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.80.10-2~bpo8+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.2.5-6~bpo8+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.2.5-7.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.2.7-0exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ceph
ceph-base
ceph-common
ceph-fs-common
ceph-fuse
ceph-mds
ceph-mon
ceph-osd
ceph-resource-agents
ceph-test
libcephfs-dev
libcephfs-java
libcephfs-jni
libcephfs1
librados-dev
librados2
libradosstriper-dev
libradosstriper1
librbd-dev
librbd1
librgw-dev
librgw2
python-ceph
python-cephfs
python-rados
python-rbd
radosgw
rbd-fuse
rbd-mirror
rbd-nbd

action needed

A new upstream version is available: 13.2.0 high

A new upstream version 13.2.0 is available, you should consider packaging it.

Created: 2017-11-21 Last update: 2018-07-21 14:06

4 security issues in buster high

There are 4 open security issues in buster.

4 important issues:

CVE-2017-7519:
CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-10861: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Please fix them.

Created: 2017-06-18 Last update: 2018-07-15 02:30

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2017-7519:
CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-10861: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Please fix them.

Created: 2017-06-10 Last update: 2018-07-15 02:30

4 security issues in stretch high

There are 4 open security issues in stretch.

3 important issues:

CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-10861: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

1 issue skipped by the security teams:

CVE-2017-7519:

Please fix them.

Created: 2017-06-10 Last update: 2018-07-15 02:30

Error while accessing the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: repository 'https://anonscm.debian.org/git/pkg-ceph/ceph.git/' not found

Created: 2017-12-03 Last update: 2018-07-03 15:57

lintian reports 12 errors and 102 warnings high

Lintian reports 12 errors and 102 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-03 Last update: 2018-06-23 07:44

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.1.4 instead of 3.9.8).

Created: 2018-04-16 Last update: 2018-04-16 20:52

Multiarch hinter reports 11 issue(s) normal

There are issues with the multiarch metadata for this package.

libcephfs-dev could be marked Multi-Arch: same
libcephfs1 could be marked Multi-Arch: same
librados2 could be marked Multi-Arch: same
libradosstriper-dev could be marked Multi-Arch: same
libradosstriper1 could be marked Multi-Arch: same
librbd-dev could be marked Multi-Arch: same
librbd1 could be marked Multi-Arch: same
librgw-dev could be marked Multi-Arch: same
librgw2 could be marked Multi-Arch: same
python-rados could be marked Multi-Arch: same
python-rbd could be marked Multi-Arch: same

Created: 2017-06-09 Last update: 2018-07-21 14:23

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2017-01-23 Last update: 2018-07-21 14:20

Depends on packages which need a new maintainer normal

The packages that ceph depends on which need a new maintainer are:

xml2 (#876203)
- Depends: xml2
logrotate (#887151)
- Suggests: logrotate logrotate

Created: 2017-12-02 Last update: 2018-07-21 14:16

8 bugs tagged patch in the BTS normal

The BTS contains patches fixing 8 bugs, consider including or untagging them.

Created: 2017-11-21 Last update: 2018-07-21 13:39

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2018-06-14 Last update: 2018-07-21 14:12

3 ignored security issues in jessie low

There are 3 open security issues in jessie.

3 issues skipped by the security teams:

CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-10861: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Please fix them.

Created: 2018-07-10 Last update: 2018-07-15 02:30

Build log checks report 3 warnings low

Build log checks report 3 warnings

Created: 2017-01-06 Last update: 2017-01-06 01:11

news

[rss feed]

[2017-06-10] ceph 10.2.5-7.2 MIGRATED to testing (Debian testing watch)
[2017-06-07] Accepted ceph 10.2.5-7.2 (source) into unstable (Adrian Bunk)
[2017-06-06] Accepted ceph 10.2.5-7.1 (source) into unstable (Andreas Beckmann)
[2017-05-23] ceph 10.2.5-7 MIGRATED to testing (Debian testing watch)
[2017-05-17] Accepted ceph 10.2.7-0exp1 (source amd64 all) into experimental (Gaudenz Steinlin)
[2017-05-12] Accepted ceph 10.2.5-7 (source amd64 all) into unstable (Gaudenz Steinlin)
[2017-01-31] Accepted ceph 10.2.5-6~bpo8+1 (source amd64 all) into jessie-backports, jessie-backports (Gaudenz Steinlin)
[2017-01-22] ceph 10.2.5-6 MIGRATED to testing (Debian testing watch)
[2017-01-11] Accepted ceph 10.2.5-6 (source) into unstable (Gaudenz Steinlin)
[2017-01-10] Accepted ceph 10.2.5-5 (source amd64 all) into unstable (Gaudenz Steinlin)
[2017-01-08] Accepted ceph 10.2.5-4 (source) into unstable (Gaudenz Steinlin)
[2017-01-06] Accepted ceph 0.80.7-2+deb8u2 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Gaudenz Steinlin)
[2017-01-05] Accepted ceph 10.2.5-3 (source amd64 all) into unstable (Gaudenz Steinlin)
[2016-12-24] Accepted ceph 10.2.5-2 (source amd64 all) into unstable (Gaudenz Steinlin)
[2016-12-21] Accepted ceph 10.2.5-1 (source amd64 all) into unstable, unstable (Gaudenz Steinlin)
[2016-10-09] ceph 0.80.11-1.1 MIGRATED to testing (Debian testing watch)
[2016-10-03] Accepted ceph 0.80.11-1.1 (source) into unstable (Mattia Rizzolo)
[2016-10-01] Accepted ceph 0.94.5-1.1 (source) into experimental (Mattia Rizzolo)
[2016-01-23] ceph 0.80.11-1 MIGRATED to testing (Debian testing watch)
[2016-01-18] Accepted ceph 0.80.7-2+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Gaudenz Steinlin)
[2016-01-17] Accepted ceph 0.80.11-1 (source amd64 all) into unstable (Gaudenz Steinlin)
[2015-11-17] Accepted ceph 0.94.5-1 (source amd64 all) into experimental (James Page)
[2015-10-15] ceph 0.80.10-2 MIGRATED to testing (Britney)
[2015-10-12] Accepted ceph 0.80.10-2 (source amd64 all) into unstable (Gaudenz Steinlin)
[2015-10-07] Accepted ceph 0.80.10-1 (source amd64 all) into unstable (Gaudenz Steinlin)
[2015-09-18] Accepted ceph 0.94.3-1 (source amd64 all) into experimental (Gaudenz Steinlin)
[2015-07-20] Accepted ceph 0.94.2-2 (source amd64 all) into experimental (James Page)
[2015-06-29] Accepted ceph 0.94.2-1 (source amd64 all) into experimental, experimental (James Page)
[2015-05-11] ceph 0.80.9-2 MIGRATED to testing (Britney)
[2015-05-05] Accepted ceph 0.80.9-2 (source amd64 all) into unstable (Gaudenz Steinlin)

bugs [bug history graph]

all: 17 20
RC: 4
I&N: 9 12
M&W: 4
F&P: 0

links

homepage
lintian (12, 102)
buildd: logs, exp, checks, clang, reproducibility
popcon
debci
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 12.2.4-0ubuntu1.1build1
19 bugs