This document is for a development version of Ceph.
CVE-2021-3531: Swift API denial of service¶
Unauthenticated users of the Swift API can trigger a server-side assertion with a malformed URL, leading to a denial of service.
Nautilus v14.2.0 and later
Pacific v16.2.4 (and later)
Octopus v15.2.12 (and later)
Nautilus v14.2.21 (and later)
All users of Ceph object storage (RGW) should upgrade.