Ceph 10.2.11 和 12.2.6 已发布。更新内容如下:
10.2.11
- CVE 2018-1128: auth: cephx authorizer subject to replay attack (issue#24836, Sage Weil)
- CVE 2018-1129: auth: cephx signature check is weak (issue#24837, Sage Weil)
- CVE 2018-10861: mon: auth checks not correct for pool ops (issue#24838, Jason Dillaman)
- The RBD C API’s rbd_discard method and the C++ API’s Image::discard method
now enforce a maximum length of 2GB. This restriction prevents overflow of
the result code.
完整更新内容请查看发布说明。
下载地址:
12.2.6暂未提供更新内容。
下载地址:
转自 https://www.oschina.net/news/97914/ceph-12-2-6-released