[Secure-testing-team] Bug#829661: ceph: CVE-2016-5009: Ceph monitor crash: mon_command crashes ceph monitors on receiving empty prefix

[Salvatore Bonaccorso]

Source: ceph
Version: 0.80.7-2
Severity: important
Tags: security upstream

Hi Ceph maintainers,

the following vulnerability was published for ceph.

CVE-2016-5009[0]:
Ceph monitor crash: mon_command crashes ceph monitors on receiving empty prefix

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5009

Please adjust the affected versions in the BTS as needed. It most
likely does not warrant a DSA, but could you fix it as well in an
upcoming jessie point release?

Regards,
Salvatore