[ubuntu/bionic-updates] cinder 2:12.0.10-0ubuntu2.2 (Accepted)

[Ubuntu Archive Robot]

cinder (2:12.0.10-0ubuntu2.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access
    - debian/patches/CVE-2022-47951.patch: Check VMDK subformat
      against an allowed list.
    - debian/patches/use_json_format.patch: switch qemu_img_info to json
      format.
    - CVE-2022-47951

Date: 2023-02-07 23:56:08.738260+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/cinder/2:12.0.10-0ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.