[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CABBoSthAQU5yHPjTFWDWWpb4ENexWrQqWW07K-udfYCsQ-VDtQ@mail.gmail.com>
Date: Wed, 12 Jan 2022 10:54:42 -0500
From: Ana McTaggart <amctagga@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size
Here is our patch :)
Ana McTaggart
Red Hat Product Security
Red Hat Remote <https://www.redhat.com>
secalert@...hat.com for urgent response
amct@...hat.com
M: +1 (774)279-0791 <7742790791> IM: amctagga
Pronouns:They/Them/Theirs
On Wed, Jan 12, 2022 at 7:54 AM Sven Kieske <S.Kieske@...twald.de> wrote:
> On Di, 2022-01-11 at 22:52 -0600, John Helmert III wrote:
> > Was a patch meant to be attached? Is there any report or PR upstream?
>
> There is at least no new commit in
> https://github.com/ceph/ceph/blob/master/src/ceph-volume/ceph_volume/util/encryption.py
>
> from a cursory glance at the open PRs I also don't see anything related,
> but I just might have missed it.
>
> There is also no tracking bug at https://tracker.ceph.com when searching
> for this CVE number.
>
> --
> Mit freundlichen Grüßen / Regards
>
> Sven Kieske
> Systementwickler / systems engineer
>
>
> Mittwald CM Service GmbH & Co. KG
> Königsberger Straße 4-6
> 32339 Espelkamp
>
> Tel.: 05772 / 293-900
> Fax: 05772 / 293-333
>
> https://www.mittwald.de
>
> Geschäftsführer: Robert Meyer, Florian Jürgens
>
> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
> Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
>
> Informationen zur Datenverarbeitung im Rahmen unserer Geschäftstätigkeit
> gemäß Art. 13-14 DSGVO sind unter www.mittwald.de/ds abrufbar.
>
>
Content of type "text/html" skipped
View attachment "encryption.py.patch" of type "text/x-patch" (1970 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
