[ubuntu/eoan-security] keystone 2:16.0.0-0ubuntu1.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Jan 30 13:02:49 UTC 2020
keystone (2:16.0.0-0ubuntu1.1) eoan-security; urgency=medium
* SECURITY UPDATE: data leakage in the list credentials API
- debian/patches/CVE-2019-19687.patch: fix credential list for project
members in keystone/api/credentials.py,
keystone/tests/protection/v3/test_credentials.py,
releasenotes/notes/bug-1855080-08b28181b7cb2470.yaml.
- CVE-2019-19687
Date: 2020-01-24 19:53:15.613426+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/keystone/2:16.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Eoan-changes
mailing list