ceph (17.2.9-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Improper certificate checking via Pybind
    - debian/patches/CVE-2024-31884.patch: Enforce ssl context validation to
      SMTP_SSL in src/pybind/mgr/alerts/module.py
    - CVE-2024-31884
  * SECURITY UPDATE: Denial of service by passing empty header argument
    - debian/patches/CVE-2024-47866.patch: Ensure `HTTP_X_AMZ_COPY_SOURCE`
      header is empty in src/rgw/rgw_op.cc
    - CVE-2024-47866

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Sun, 08 Feb 2026 15:51:55 -0500

ceph (17.2.9-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream point release (LP: #2100625):
    - d/p/lp2078906-inode-print.patch: Prevent race condition when 
      printing inode in ll_sync_inode. (LP: #2078906)
    - d/p/fix-lvm-devices.patch: Drop, included in release.
    - d/p/fix-snapmapper-ftbfs.patch: Moved from hunk in 
      d/p/fix-lvm-devices.patch to its own file.

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Thu, 21 Aug 2025 11:33:49 +0000

ceph (17.2.7-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass through unsupported JWT algorithm.
    - debian/patches/CVE-2024-48916.patch: Disallow unsupported JWT algorithms
      in src/rgw/rgw_rest_sts.cc.
    - CVE-2024-48916

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Wed, 18 Dec 2024 11:18:59 -0330

ceph (17.2.7-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream point release (LP: #2043336):
    - d/p/fix-lvm-devices.patch: Cherry pick committed fix for issues
      using LVM PV/LV for OSDs introduced in 17.2.7 release.
    - d/p/patch-out-exporter.patch: Refresh for new release.
    - d/p/CVE-2023-43040.patch: Drop, included in release.

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Thu, 08 Feb 2024 11:33:49 +0000

ceph (17.2.6-0ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Improper bucket validation in POST requests
    - debian/patches/CVE-2023-43040.patch: rgw: Fix bucket validation against POST policies
    - CVE-2023-43040

 -- Nick Galanis <nick.galanis@canonical.com>  Thu, 11 Jan 2024 12:26:46 +0000

ceph (17.2.6-0ubuntu0.22.04.2) jammy; urgency=medium

  [ Peter Sabaini]
  * Create package for the cephfs-mirror tool (LP: #2003704).

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Thu, 31 Aug 2023 22:44:27 +0000

ceph (17.2.6-0ubuntu0.22.04.1) jammy; urgency=medium

  [ Luciano Lo Giudice ]
  * New upstream point release (LP: #2018929).
  * d/p/*: Refresh.

  [ Peter Sabaini ]
  * Fix: add the mgr.nfs package to the core modules (LP: #2003530).

  [ James Page ]
  * d/p/32bit-fixes.patch: rework size_t usage to avoid FTBFS on 32 bit
    architectures.
  * d/p/CVE-2022-*: Drop security related patches, included in release.

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Fri, 26 May 2023 15:42:09 +0100

ceph (17.2.5-0ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via ceph crash service
    - debian/patches/CVE-2022-3650-1.patch: re-add unused frame in
      handler() in src/ceph-crash.in.
    - debian/patches/CVE-2022-3650-2.patch: fix some flake8 issues in
      src/ceph-crash.in.
    - debian/patches/CVE-2022-3650-3.patch: fix stderr handling in
      src/ceph-crash.in.
    - debian/patches/CVE-2022-3650-4.patch: drop privleges to run as "ceph"
      user, rather than root in src/ceph-crash.in.
    - debian/patches/CVE-2022-3650-5.patch: chown crash files to ceph user
      in qa/workunits/rados/test_crash.sh.
    - debian/patches/CVE-2022-3650-6.patch: log warning if crash directory
      unreadable in src/ceph-crash.in.
    - CVE-2022-3650
  * This also fixes CVE-2022-0670 and CVE-2022-3854 in the -security
    pocket.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 19 Apr 2023 18:59:11 -0400

ceph (17.2.5-0ubuntu0.22.04.2) jammy; urgency=medium

  * d/ceph-mgr.install: Add object_format.py to mgr install.

 -- Chris MacNaughton <chris.macnaughton@ubuntu.com>  Wed, 15 Mar 2023 14:59:57 +0000

ceph (17.2.5-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream point release (LP: #1998958).
  * d/p/py310-py-ssize-t-compat.patch: Dropped, included upstream.
  * d/p/patch-out-exporter: Don't build the node exporter as it
    fails on Jammy.

 -- Luciano Lo Giudice <luciano.logiudice@canonical.com>  Mon, 06 Mar 2023 16:38:42 +0000

# For older changelog entries, run 'apt-get changelog python3-ceph-common'
