Ceph security issue CVE-2025-30156

[udo]

Hi,
there is an critical security issue on ceph
https://notcve.org/cve/CVE-2025-30156

I assume you are working on new packages. Can you estimate when they'll be ready?


Best regards

Udo

 

[UweSauter]

As this might require further administrative action besides updating packages I've created https://forum.proxmox.com/threads/c...vised-probably-required-in-the-future.185863/

 

[alain]

I am on the Ceph users email list, and it seems the fix is not a simple update, and will not be trivial. You have to use new authentication keys, aes256k, and rotate the keys used, and for that (for rbd storage at least), shutdown all VMs. And hope they will restart normally...

 

[udo]

I am on the Ceph users email list, and it seems the fix is not a simple update, and will not be trivial. You have to use new authentication keys, aes256k, and rotate the keys used, and for that (for rbd storage at least), shutdown all VMs. And hope they will restart normally...

of course it's not tivial - especialy if you have cephfs and radosgw running too (like me).