Update26.02.2026

USN-8045-1: Ceph-Schwachstellen

Ubuntu Desktop
Canonical

USN-8045-1: Ceph-Schwachstellen

Veröffentlichungsdatum: 24. Februar 2026
Überblick: Mehrere Sicherheitsprobleme wurden in Ceph behoben.

Pakete
ceph - verteiltes Speicher- und Dateisystem

Details
Martin Schobert entdeckte, dass Ceph SSL-Zertifikate nicht richtig verifiziert
Zertifikate bei der Verwendung von Pybind für sichere E-Mail-Verbindungen
was dazu führen kann, dass ungültige Zertifikate akzeptiert werden. Ein Angreifer könnte dieses Problem möglicherweise nutzen
Angreifer dieses Problem ausnutzen, um einen Zwischenangriff durchzuführen und auf
oder den Inhalt von Nachrichten zugreifen. Dieses Problem betraf nur Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS und Ubuntu 25.10. (CVE-2024-31884)

Es wurde festgestellt, dass das RADOS-Gateway (RGW) von Ceph bestimmte
bestimmte Header-Parameter nicht richtig behandelt. Ein Angreifer könnte dieses Problem möglicherweise ausnutzen, um
den RGW-Dienst zum Absturz bringen, was zu einer Dienstverweigerung führt.
(CVE-2024-47866)

Anweisungen zur Aktualisierung
Das Problem kann behoben werden, indem Sie Ihr System auf die folgenden Paketversionen aktualisieren:

25.10 questing

ceph - 19.2.3-0ubuntu1.25.10.3
ceph-base - 19.2.3-0ubuntu1.25.10.3
ceph-common - 19.2.3-0ubuntu1.25.10.3
ceph-exporter - 19.2.3-0ubuntu1.25.10.3
ceph-fuse - 19.2.3-0ubuntu1.25.10.3
ceph-grafana-dashboards - 19.2.3-0ubuntu1.25.10.3
ceph-immutable-object-cache - 19.2.3-0ubuntu1.25.10.3
ceph-mds - 19.2.3-0ubuntu1.25.10.3
ceph-mgr - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-cephadm - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-dashboard - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-diskprediction-local - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-k8sevents - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-modules-core - 19.2.3-0ubuntu1.25.10.3
ceph-mgr-rook - 19.2.3-0ubuntu1.25.10.3
ceph-mon - 19.2.3-0ubuntu1.25.10.3
ceph-osd - 19.2.3-0ubuntu1.25.10.3
ceph-prometheus-alerts - 19.2.3-0ubuntu1.25.10.3
ceph-resource-agents - 19.2.3-0ubuntu1.25.10.3
ceph-volume - 19.2.3-0ubuntu1.25.10.3
cephadm - 19.2.3-0ubuntu1.25.10.3
cephfs-mirror - 19.2.3-0ubuntu1.25.10.3
cephfs-shell - 19.2.3-0ubuntu1.25.10.3
crimson-osd - 19.2.3-0ubuntu1.25.10.3
libcephfs-dev - 19.2.3-0ubuntu1.25.10.3
libcephfs-java - 19.2.3-0ubuntu1.25.10.3
libcephfs-jni - 19.2.3-0ubuntu1.25.10.3
libcephfs2 - 19.2.3-0ubuntu1.25.10.3
librados-dev - 19.2.3-0ubuntu1.25.10.3
librados2 - 19.2.3-0ubuntu1.25.10.3
libradospp-dev - 19.2.3-0ubuntu1.25.10.3
libradosstriper-dev - 19.2.3-0ubuntu1.25.10.3
libradosstriper1 - 19.2.3-0ubuntu1.25.10.3
librbd-dev - 19.2.3-0ubuntu1.25.10.3
librbd1 - 19.2.3-0ubuntu1.25.10.3
librgw-dev - 19.2.3-0ubuntu1.25.10.3
librgw2 - 19.2.3-0ubuntu1.25.10.3
libsqlite3-mod-ceph - 19.2.3-0ubuntu1.25.10.3
libsqlite3-mod-ceph-dev - 19.2.3-0ubuntu1.25.10.3
python3-ceph - 19.2.3-0ubuntu1.25.10.3
python3-ceph-argparse - 19.2.3-0ubuntu1.25.10.3
python3-ceph-common - 19.2.3-0ubuntu1.25.10.3
python3-cephfs - 19.2.3-0ubuntu1.25.10.3
python3-rados - 19.2.3-0ubuntu1.25.10.3
python3-rbd - 19.2.3-0ubuntu1.25.10.3
python3-rgw - 19.2.3-0ubuntu1.25.10.3
rados-objclass-dev - 19.2.3-0ubuntu1.25.10.3
radosgw - 19.2.3-0ubuntu1.25.10.3
rbd-fuse - 19.2.3-0ubuntu1.25.10.3
rbd-mirror - 19.2.3-0ubuntu1.25.10.3
rbd-nbd - 19.2.3-0ubuntu1.25.10.3
24.04 LTS noble ceph - 19.2.3-0ubuntu0.24.04.3
ceph-base - 19.2.3-0ubuntu0.24.04.3
ceph-common - 19.2.3-0ubuntu0.24.04.3
ceph-fuse - 19.2.3-0ubuntu0.24.04.3
ceph-grafana-dashboards - 19.2.3-0ubuntu0.24.04.3
ceph-immutable-object-cache - 19.2.3-0ubuntu0.24.04.3
ceph-mds - 19.2.3-0ubuntu0.24.04.3
ceph-mgr - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-cephadm - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-dashboard - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-diskprediction-local - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-k8sevents - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-modules-core - 19.2.3-0ubuntu0.24.04.3
ceph-mgr-rook - 19.2.3-0ubuntu0.24.04.3
ceph-mon - 19.2.3-0ubuntu0.24.04.3
ceph-osd - 19.2.3-0ubuntu0.24.04.3
ceph-prometheus-alerts - 19.2.3-0ubuntu0.24.04.3
ceph-resource-agents - 19.2.3-0ubuntu0.24.04.3
ceph-volume - 19.2.3-0ubuntu0.24.04.3
cephadm - 19.2.3-0ubuntu0.24.04.3
cephfs-mirror - 19.2.3-0ubuntu0.24.04.3
cephfs-shell - 19.2.3-0ubuntu0.24.04.3
crimson-osd - 19.2.3-0ubuntu0.24.04.3
libcephfs-dev - 19.2.3-0ubuntu0.24.04.3
libcephfs-java - 19.2.3-0ubuntu0.24.04.3
libcephfs-jni - 19.2.3-0ubuntu0.24.04.3
libcephfs2 - 19.2.3-0ubuntu0.24.04.3
librados-dev - 19.2.3-0ubuntu0.24.04.3
librados2 - 19.2.3-0ubuntu0.24.04.3
libradospp-dev - 19.2.3-0ubuntu0.24.04.3
libradosstriper-dev - 19.2.3-0ubuntu0.24.04.3
libradosstriper1 - 19.2.3-0ubuntu0.24.04.3
librbd-dev - 19.2.3-0ubuntu0.24.04.3
librbd1 - 19.2.3-0ubuntu0.24.04.3
librgw-dev - 19.2.3-0ubuntu0.24.04.3
librgw2 - 19.2.3-0ubuntu0.24.04.3
libsqlite3-mod-ceph - 19.2.3-0ubuntu0.24.04.3
libsqlite3-mod-ceph-dev - 19.2.3-0ubuntu0.24.04.3
python3-ceph - 19.2.3-0ubuntu0.24.04.3
python3-ceph-argparse - 19.2.3-0ubuntu0.24.04.3
python3-ceph-common - 19.2.3-0ubuntu0.24.04.3
python3-cephfs - 19.2.3-0ubuntu0.24.04.3
python3-rados - 19.2.3-0ubuntu0.24.04.3
python3-rbd - 19.2.3-0ubuntu0.24.04.3
python3-rgw - 19.2.3-0ubuntu0.24.04.3
rados-objclass-dev - 19.2.3-0ubuntu0.24.04.3
radosgw - 19.2.3-0ubuntu0.24.04.3
rbd-fuse - 19.2.3-0ubuntu0.24.04.3
rbd-mirror - 19.2.3-0ubuntu0.24.04.3
rbd-nbd - 19.2.3-0ubuntu0.24.04.3

22.04 LTS jammy

ceph - 17.2.9-0ubuntu0.22.04.2
ceph-base - 17.2.9-0ubuntu0.22.04.2
ceph-common - 17.2.9-0ubuntu0.22.04.2
ceph-fuse - 17.2.9-0ubuntu0.22.04.2
ceph-grafana-dashboards - 17.2.9-0ubuntu0.22.04.2
ceph-immutable-object-cache - 17.2.9-0ubuntu0.22.04.2
ceph-mds - 17.2.9-0ubuntu0.22.04.2
ceph-mgr - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-cephadm - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-dashboard - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-diskprediction-local - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-k8sevents - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-modules-core - 17.2.9-0ubuntu0.22.04.2
ceph-mgr-rook - 17.2.9-0ubuntu0.22.04.2
ceph-mon - 17.2.9-0ubuntu0.22.04.2
ceph-osd - 17.2.9-0ubuntu0.22.04.2
ceph-prometheus-alerts - 17.2.9-0ubuntu0.22.04.2
ceph-Ressourcen-Agenten - 17.2.9-0ubuntu0.22.04.2
ceph-volume - 17.2.9-0ubuntu0.22.04.2
cephadm - 17.2.9-0ubuntu0.22.04.2
cephfs-mirror - 17.2.9-0ubuntu0.22.04.2
cephfs-shell - 17.2.9-0ubuntu0.22.04.2
crimson-osd - 17.2.9-0ubuntu0.22.04.2
libcephfs-dev - 17.2.9-0ubuntu0.22.04.2
libcephfs-java - 17.2.9-0ubuntu0.22.04.2
libcephfs-jni - 17.2.9-0ubuntu0.22.04.2
libcephfs2 - 17.2.9-0ubuntu0.22.04.2
librados-dev - 17.2.9-0ubuntu0.22.04.2
librados2 - 17.2.9-0ubuntu0.22.04.2
libradospp-dev - 17.2.9-0ubuntu0.22.04.2
libradosstriper-dev - 17.2.9-0ubuntu0.22.04.2
libradosstriper1 - 17.2.9-0ubuntu0.22.04.2
librbd-dev - 17.2.9-0ubuntu0.22.04.2
librbd1 - 17.2.9-0ubuntu0.22.04.2
librgw-dev - 17.2.9-0ubuntu0.22.04.2
librgw2 - 17.2.9-0ubuntu0.22.04.2
libsqlite3-mod-ceph - 17.2.9-0ubuntu0.22.04.2
libsqlite3-mod-ceph-dev - 17.2.9-0ubuntu0.22.04.2
python3-ceph - 17.2.9-0ubuntu0.22.04.2
python3-ceph-argparse - 17.2.9-0ubuntu0.22.04.2
python3-ceph-common - 17.2.9-0ubuntu0.22.04.2
python3-cephfs - 17.2.9-0ubuntu0.22.04.2
python3-rados - 17.2.9-0ubuntu0.22.04.2
python3-rbd - 17.2.9-0ubuntu0.22.04.2
python3-rgw - 17.2.9-0ubuntu0.22.04.2
rados-objclass-dev - 17.2.9-0ubuntu0.22.04.2
radosgw - 17.2.9-0ubuntu0.22.04.2
rbd-fuse - 17.2.9-0ubuntu0.22.04.2
rbd-mirror - 17.2.9-0ubuntu0.22.04.2
rbd-nbd - 17.2.9-0ubuntu0.22.04.2

20.04 LTS focal

ceph - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-base - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-common - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-fuse - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-immutable-object-cache - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mds - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-cephadm - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-dashboard - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-diskprediction-cloud - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-diskprediction-local - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-k8sevents - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-modules-core - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mgr-rook - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-mon - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-osd - 15.2.17-0ubuntu0.20.04.6+esm1
ceph-Ressourcen-Agenten - 15.2.17-0ubuntu0.20.04.6+esm1
cephadm - 15.2.17-0ubuntu0.20.04.6+esm1
cephfs-shell - 15.2.17-0ubuntu0.20.04.6+esm1
libcephfs-dev - 15.2.17-0ubuntu0.20.04.6+esm1
libcephfs-java - 15.2.17-0ubuntu0.20.04.6+esm1
libcephfs-jni - 15.2.17-0ubuntu0.20.04.6+esm1
libcephfs2 - 15.2.17-0ubuntu0.20.04.6+esm1
librados-dev - 15.2.17-0ubuntu0.20.04.6+esm1
librados2 - 15.2.17-0ubuntu0.20.04.6+esm1
libradospp-dev - 15.2.17-0ubuntu0.20.04.6+esm1
libradosstriper-dev - 15.2.17-0ubuntu0.20.04.6+esm1
libradosstriper1 - 15.2.17-0ubuntu0.20.04.6+esm1
librbd-dev - 15.2.17-0ubuntu0.20.04.6+esm1
librbd1 - 15.2.17-0ubuntu0.20.04.6+esm1
librgw-dev - 15.2.17-0ubuntu0.20.04.6+esm1
librgw2 - 15.2.17-0ubuntu0.20.04.6+esm1
python3-ceph - 15.2.17-0ubuntu0.20.04.6+esm1
python3-ceph-argparse - 15.2.17-0ubuntu0.20.04.6+esm1
python3-ceph-common - 15.2.17-0ubuntu0.20.04.6+esm1
python3-cephfs - 15.2.17-0ubuntu0.20.04.6+esm1
python3-rados - 15.2.17-0ubuntu0.20.04.6+esm1
python3-rbd - 15.2.17-0ubuntu0.20.04.6+esm1
python3-rgw - 15.2.17-0ubuntu0.20.04.6+esm1
rados-objclass-dev - 15.2.17-0ubuntu0.20.04.6+esm1
radosgw - 15.2.17-0ubuntu0.20.04.6+esm1
rbd-fuse - 15.2.17-0ubuntu0.20.04.6+esm1
rbd-mirror - 15.2.17-0ubuntu0.20.04.6+esm1
rbd-nbd - 15.2.17-0ubuntu0.20.04.6+esm1

18.04 LTS bionic

ceph - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-base - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-common - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-fuse - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-mds - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-mgr - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-mon - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-osd - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-Ressourcen-Agenten - 12.2.13-0ubuntu0.18.04.11+esm2
ceph-test - 12.2.13-0ubuntu0.18.04.11+esm2
libcephfs-dev - 12.2.13-0ubuntu0.18.04.11+esm2
libcephfs-java - 12.2.13-0ubuntu0.18.04.11+esm2
libcephfs-jni - 12.2.13-0ubuntu0.18.04.11+esm2
libcephfs2 - 12.2.13-0ubuntu0.18.04.11+esm2
librados-dev - 12.2.13-0ubuntu0.18.04.11+esm2
librados2 - 12.2.13-0ubuntu0.18.04.11+esm2
libradosstriper-dev - 12.2.13-0ubuntu0.18.04.11+esm2
libradosstriper1 - 12.2.13-0ubuntu0.18.04.11+esm2
librbd-dev - 12.2.13-0ubuntu0.18.04.11+esm2
librbd1 - 12.2.13-0ubuntu0.18.04.11+esm2
librgw-dev - 12.2.13-0ubuntu0.18.04.11+esm2
librgw2 - 12.2.13-0ubuntu0.18.04.11+esm2
python-ceph - 12.2.13-0ubuntu0.18.04.11+esm2
python-cephfs - 12.2.13-0ubuntu0.18.04.11+esm2
python-rados - 12.2.13-0ubuntu0.18.04.11+esm2
python-rbd - 12.2.13-0ubuntu0.18.04.11+esm2
python-rgw - 12.2.13-0ubuntu0.18.04.11+esm2
python3-ceph-argparse - 12.2.13-0ubuntu0.18.04.11+esm2
python3-cephfs - 12.2.13-0ubuntu0.18.04.11+esm2
python3-rados - 12.2.13-0ubuntu0.18.04.11+esm2
python3-rbd - 12.2.13-0ubuntu0.18.04.11+esm2
python3-rgw - 12.2.13-0ubuntu0.18.04.11+esm2
rados-objclass-dev - 12.2.13-0ubuntu0.18.04.11+esm2
radosgw - 12.2.13-0ubuntu0.18.04.11+esm2
rbd-fuse - 12.2.13-0ubuntu0.18.04.11+esm2
rbd-mirror - 12.2.13-0ubuntu0.18.04.11+esm2
rbd-nbd - 12.2.13-0ubuntu0.18.04.11+esm2

16.04 LTS xenial

ceph - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-common - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-fs-common - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-fuse - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-mds - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-ressourcen-agenten - 10.2.11-0ubuntu0.16.04.3+esm3
ceph-test - 10.2.11-0ubuntu0.16.04.3+esm3
libcephfs-dev - 10.2.11-0ubuntu0.16.04.3+esm3
libcephfs-java - 10.2.11-0ubuntu0.16.04.3+esm3
libcephfs-jni - 10.2.11-0ubuntu0.16.04.3+esm3
libcephfs1 - 10.2.11-0ubuntu0.16.04.3+esm3
librados-dev - 10.2.11-0ubuntu0.16.04.3+esm3
librados2 - 10.2.11-0ubuntu0.16.04.3+esm3
libradosstriper-dev - 10.2.11-0ubuntu0.16.04.3+esm3
libradosstriper1 - 10.2.11-0ubuntu0.16.04.3+esm3
librbd-dev - 10.2.11-0ubuntu0.16.04.3+esm3
librbd1 - 10.2.11-0ubuntu0.16.04.3+esm3
librgw-dev - 10.2.11-0ubuntu0.16.04.3+esm3
librgw2 - 10.2.11-0ubuntu0.16.04.3+esm3
python-ceph - 10.2.11-0ubuntu0.16.04.3+esm3
python-cephfs - 10.2.11-0ubuntu0.16.04.3+esm3
python-rados - 10.2.11-0ubuntu0.16.04.3+esm3
python-rbd - 10.2.11-0ubuntu0.16.04.3+esm3
radosgw - 10.2.11-0ubuntu0.16.04.3+esm3
rbd-fuse - 10.2.11-0ubuntu0.16.04.3+esm3
rbd-mirror - 10.2.11-0ubuntu0.16.04.3+esm3
rbd-nbd - 10.2.11-0ubuntu0.16.04.3+esm3

14.04 LTS trusty

ceph - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-common - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-fs-common - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-fuse - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-mds - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-resource-agents - 0.80.11-0ubuntu1.14.04.4+esm4
ceph-test - 0.80.11-0ubuntu1.14.04.4+esm4
libcephfs-dev - 0.80.11-0ubuntu1.14.04.4+esm4
libcephfs-java - 0.80.11-0ubuntu1.14.04.4+esm4
libcephfs-jni - 0.80.11-0ubuntu1.14.04.4+esm4
libcephfs1 - 0.80.11-0ubuntu1.14.04.4+esm4
librados-dev - 0.80.11-0ubuntu1.14.04.4+esm4
librados2 - 0.80.11-0ubuntu1.14.04.4+esm4
librbd-dev - 0.80.11-0ubuntu1.14.04.4+esm4
librbd1 - 0.80.11-0ubuntu1.14.04.4+esm4
python-ceph - 0.80.11-0ubuntu1.14.04.4+esm4
radosgw - 0.80.11-0ubuntu1.14.04.4+esm4
rbd-fuse - 0.80.11-0ubuntu1.14.04.4+esm4
rest-bench - 0.80.11-0ubuntu1.14.04.4+esm4