[Git][security-tracker-team/security-tracker][master] Add CVE-2024-47866/ceph

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0dbfdba8 by Salvatore Bonaccorso at 2025-11-13T08:34:04+01:00
Add CVE-2024-47866/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -149,7 +149,12 @@ CVE-2025-10495 (A potential vulnerability was reported in the Lenovo PC Manager,
 CVE-2024-48829 (Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2024-47866 (Ceph is a distributed object, block, and file storage platform. In ver ...)
-	TODO: check
+	- ceph <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2025/11/11/3
+	NOTE: https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8
+	NOTE: https://tracker.ceph.com/issues/72669
+	NOTE: https://github.com/ceph/ceph/pull/65159
+	NOTE: Fixed by: https://github.com/ceph/ceph/commit/bef59f17293e6e93af025eba1e00646d0b1a2bf0
 CVE-2024-45301 (Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2 ...)
 	NOT-FOR-US: Mintty
 CVE-2025-40177 (In the Linux kernel, the following vulnerability has been resolved:  a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dbfdba85c78830a8b8ef78d093ec60255d1481d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dbfdba85c78830a8b8ef78d093ec60255d1481d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251113/4ae58d91/attachment.htm>