[ceph-users] Re: v14.2.16 Nautilus released

Thanks for this. Is download.ceph.com more heavily loaded than usual? It's taking more than 24 hours to rsync this release to our local mirror (and AFAICT none of the European mirrors have caught up yet). Cheers, Dan On Thu, Dec 17, 2020 at 3:55 AM David Galloway <dgallowa(a)redhat.com> wrote: > > This is the 16th backport release in the Nautilus series. This release fixes a > security flaw in CephFS. We recommend users to update to this release. > > Notable Changes > --------------- > * CVE-2020-27781 : OpenStack Manila use of ceph_volume_client.py library allowed > tenant access to any Ceph credential's secret. (Kotresh Hiremath Ravishankar, > Ramana Raja) > > > Changelog > --------- > * pybind/ceph_volume_client: disallow authorize on existing auth ids (Kotresh > Hiremath Ravishankar, Ramana Raja) > > > Getting Ceph > ------------ > * Git at git://github.com/ceph/ceph.git > * Tarball at http://download.ceph.com/tarballs/ceph-14.2.16.tar.gz > * For packages, see http://docs.ceph.com/docs/master/install/get-packages/ > * Release git sha1: 762032d6f509d5e7ee7dc008d80fe9c87086603c >