diff --git a/0010-fix-CVE-2022-3650.patch b/0010-fix-CVE-2022-3650.patch index c86df0f..013f91a 100644 --- a/0010-fix-CVE-2022-3650.patch +++ b/0010-fix-CVE-2022-3650.patch @@ -2,7 +2,14 @@ From f4035e49ee4745cd384d48a2334be793ce8df461 Mon Sep 17 00:00:00 2001 From: wangzengliang1 Date: Mon, 5 Dec 2022 15:10:45 +0800 Subject: [PATCH] fix +ceph-crash: drop privleges to run as "ceph" user, rather than root +If privileges cannot be dropped, log an error and exit. This commit +also catches and logs exceptions when scraping the crash path, without +which ceph-crash would just exit if it encountered an error. +Fixes: CVE-2022-3650 +Fixes: https://tracker.ceph.com/issues/57967 +Signed-off-by: Tim Serong --- src/ceph-crash.in | 28 ++++++++++++++++++++++++++-- 1 file changed, 26 insertions(+), 2 deletions(-)