Ubuntu has issued an advisory on January 6: https://ubuntu.com/security/notices/USN-7182-1
Whiteboard: (none) => MGA9TOOSource RPM: (none) => ceph-19.2.0-2.mga10.src.rpm, ceph-18.1.1-1.mga9.src.rpmStatus comment: (none) => Patch available from UbuntuCVE: (none) => CVE-2024-48916
Several people have packaged this. BTW, I see in our package description: "Ceph is a distributed file system that provides a traditional interface with POSIX semantics. As one can easily check on the website, it also severely lacks an introductory documentation thereby reducing the relevant information contained in this description to an unique sentence, the first. The Ceph user base grows and the development pace quickens, such that an increasing number of people are unfortunately only updating the technical documentation. Therefore, even small contributions like fixing spelling errors or clarifying instructions will immensely help the Ceph project." But looking at https://ceph.io/en/ there seem to now be lots of good information and setup guides, so that text should be revised.
CC: (none) => friAssignee: bugsquad => pkg-bugs
Suggested advisory: ======================== The updated packages fix a security vulnerability: Authentication bypass in CEPH RadosGW. (CVE-2024-48916) References: https://ubuntu.com/security/notices/USN-7182-1 ======================== Updated packages in core/updates_testing: ======================== ceph-18.1.1-1.1.mga9 ceph-fuse-18.1.1-1.1.mga9 ceph-immutable-object-cache-18.1.1-1.1.mga9 ceph-mds-18.1.1-1.1.mga9 ceph-mgr-18.1.1-1.1.mga9 ceph-mirror-18.1.1-1.1.mga9 ceph-mon-18.1.1-1.1.mga9 ceph-osd-18.1.1-1.1.mga9 ceph-radosgw-18.1.1-1.1.mga9 ceph-rbd-18.1.1-1.1.mga9 lib(64)ceph2-18.1.1-1.1.mga9 lib(64)ceph-devel-18.1.1-1.1.mga9 lib(64)rados2-18.1.1-1.1.mga9 lib(64)rados-devel-18.1.1-1.1.mga9 lib(64)radosstriper1-18.1.1-1.1.mga9 lib(64)radosstriper-devel-18.1.1-1.1.mga9 lib(64)rbd1-18.1.1-1.1.mga9 lib(64)rbd-devel-18.1.1-1.1.mga9 lib(64)rgw2-18.1.1-1.1.mga9 lib(64)rgw-devel-18.1.1-1.1.mga9 python3-ceph-18.1.1-1.1.mga9 python3-rados-18.1.1-1.1.mga9 python3-rbd-18.1.1-1.1.mga9 python3-rgw-18.1.1-1.1.mga9 from SRPM: ceph-18.1.1-1.1.mga9.src.rpm
Whiteboard: MGA9TOO => (none)Assignee: pkg-bugs => qa-bugsStatus comment: Patch available from Ubuntu => (none)Status: NEW => ASSIGNEDSource RPM: ceph-19.2.0-2.mga10.src.rpm, ceph-18.1.1-1.mga9.src.rpm => ceph-18.1.1-1.mga9.src.rpmVersion: Cauldron => 9
MGA9-64 Plasma Wayland on Compaq H000SB No installation issues. Ref bug 29871 Comment 3 Repeated same commands with same results and as nocrashes occured and clean install, good to go.
Whiteboard: (none) => MGA9-64-OKCC: (none) => herman.viaene
Thank you Herman
Keywords: (none) => validated_updateCC: (none) => sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2025-0011.html
Resolution: (none) => FIXEDStatus: ASSIGNED => RESOLVED