cinder (1:2015.1.0-0ubuntu1.1) vivid-security; urgency=medium
* SECURITY UPDATE: arbitrary file read via crafted qcow2 backing file
- debian/patches/CVE-2015-1851.patch: disallow backing files in
cinder/image/image_utils.py, added test to
cinder/tests/test_image_utils.py.
- CVE-2015-1851
Date: 2015-07-22 15:03:12.606737+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Seth Arnold <[email protected]>
https://launchpad.net/ubuntu/+source/cinder/1:2015.1.0-0ubuntu1.1
Sorry, changesfile not available.
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
