[CVE-2015-5245] rgw: url encode exposed bucket
This commit contains changes from:
* https://github.com/ceph/ceph/pull/5430
rgw: url encode exposed bucket
Don't send the bucket name back without url encoding it.
* https://github.com/ceph/ceph/pull/4844
rgw: Do not enclose the Bucket header in quotes
HTTP headers don't have to be enclosed when it's a string.
The aforementioned commits help to prevent CVE-2015-5245
Closes-Bug: #
1520185
Change-Id: I934309ecce99628b6d1309658ee3506cc4153d64
Added Ceph 0.80.7
HA OpenStack makes use of Ceph. Although a recent enough version of Ceph is
shipped with Ubuntu 14.04 several upstream bugfixes which are important for
OpenStack have not been incorporated by Ubuntu yet, hence the custom package.
The source has been borrowed from Ubuntu 14.04:
http://archive.ubuntu.com/ubuntu/pool/main/c/ceph/ceph_0.80.7.orig.tar.bz2
http://archive.ubuntu.com/ubuntu/pool/main/c/ceph/ceph_0.80.7-0ubuntu0.14.04.1.debian.tar.xz
The additional (upstream) patches:
https://github.com/ceph/ceph/commit/
fe7bf06366adaf787816d1e68f5e3f68e8c91134
https://github.com/ceph/ceph/commit/
b8fa2ed60b6cce51701df972dbb6f5e02e0d84ba
Note: these sources are equivalent (modulo packaging changes) to the ones
in https://review.fuel-infra.org/packages/precise/ceph commit
fd95b0d17d15240b059a33b3a0f1a5bbba753817
Related-Bug: #
1386369
Related-Bug: #
1388506
Change-Id: Iaa9f190139c2bfafef195bb1fcd53b353512dde5