# v18.2.8 Reef released

DevFeed: [v18.2.8 Reef released](<https://devfeed.tech/articles/v18-2-8-reef-released-12339.md>)

Original publisher: [Read original article](<https://ceph.io/en/news/blog/2026/v18-2-8-reef-released/>)

Author: Yuri Weinstein

Published: 2026-03-20T00:00:00Z

Content type: release

Language: en

Sources: [Ceph Blog](<https://devfeed.tech/sources/ceph-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [SSL](<https://devfeed.tech/topics/ssl.md>), [Disaster Recovery](<https://devfeed.tech/topics/disaster-recovery.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [aws](<https://devfeed.tech/tags/aws.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [bug](<https://devfeed.tech/tags/bug.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [disaster-recovery](<https://devfeed.tech/tags/disaster-recovery.md>), [en-article](<https://devfeed.tech/tags/en-article.md>), [en-blog-post](<https://devfeed.tech/tags/en-blog-post.md>), [reef](<https://devfeed.tech/tags/reef.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [ssl](<https://devfeed.tech/tags/ssl.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Ceph v18.2.8 Reef is the eighth and expected final backport release in the Reef series, released on March 20, 2026. It includes upgrade guidance, security fixes for CephFS clients and Mgr Alerts, RGW and CephFS reliability fixes, configurable JWKS URL verification for AWS compliance, and additional MDS and CephFS changes.

## Source excerpt

This is the eighth, and expected to be last, backport release in the Reef series. We recommend that all users update to this release. Release Date ¶ March 20, 2026 Known Issues ¶ During QA for v18.2.8, it was found that there was a bug for upgrades from Pacific to Reef. Pacific OSDs (and other Ceph daemons) were still using a deprecated connection feature bit that was adopted to indicate a Reef OSD. This can cause a OSD_UPGRADE_FINISHED warning before all OSDs are actually upgraded to Reef. There are no known issues associated with Pacific and Reef OSDs interoperating where Pacific OSDs are "advertising" Reef compatibility; however, out of an abundance of caution, we no longer recommend upgrading from Pacific to Reef directly. Security Fixes ¶ CephFS Client: A fix was merged to prohibit unprivileged users from modifying the sgid or suid bits on a file. Previously, unprivileged users were inadvertently permitted to set these bits if they were the sole bits being modified. Mgr Alerts: The SMTP SSL context was enforced in the mgr/alerts module to resolve a security vulnerability (GHSA-xj9f-7g59-m4jx). Notable Changes ¶ RGW (RADOS Gateway): Fixed an issue where bucket rm --bypass-gc was mistakenly removing head objects instead of tail objects, potentially causing data inconsistencies. Fixed rgw-restore-bucket-index to handle objects with leading hyphens and to process versioned buckets correctly. Addressed an issue in the msg/async protocol that caused memory locks and hangs during connection shutdown. RGW STS: Made JWKS URL verification configurable for AWS compliance via the rgw_enable_jwks_url_verification configuration. CephFS / MDS: Prevented the MDS from stalling (up to 5 seconds) during rename/stat workloads by forcing the log to nudge for unstable locks after early replies. Fixed cephfs-journal-tool so it no longer incorrectly resets the journal trim position during disaster recovery, which was causing stale journal objects to linger forever in the metadata pool