Vulnerability Bulletins

DSA-4339 ceph - security update

   
Affected software Debian
 
Multiple vulnerabilities were discovered in Ceph, a distributed storageand file system: The cephx authentication protocol was suspectible toreplay attacks and calculated signatures incorrectly, ceph mon did notvalidate capabilities for pool operations (resulting in potentialcorruption or deletion of snapshot images) and a format stringvulnerability in libradosstriper could result in denial of service.

More info:

https://www.debian.org/security/2018/dsa-4339