Ubuntu
ceph package

  1. Xenial (16.04)
  2. Bug #1784401
  3. Comment #1

Comment 1 for bug 1784401

Revision history for this message
Alex Murray (alexmurray) wrote :

This would also happen to fix 3 outstanding CVEs for ceph in Xenial as well: CVE-2018-10861, CVE-2018-1128, CVE-2018-1129

I was looking at backporting fixes for these to 10.2.10 but the commits which fix the actual CVEs seem to depend on a fair few other commits in between 10.2.10 and 10.2.11 so if this SRU proceeds that will resolve these CVEs "for free"