[ubuntu/eoan-security] keystone 2:16.0.0-0ubuntu1.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Jan 30 13:02:49 UTC 2020


keystone (2:16.0.0-0ubuntu1.1) eoan-security; urgency=medium

  * SECURITY UPDATE: data leakage in the list credentials API
    - debian/patches/CVE-2019-19687.patch: fix credential list for project
      members in keystone/api/credentials.py,
      keystone/tests/protection/v3/test_credentials.py,
      releasenotes/notes/bug-1855080-08b28181b7cb2470.yaml.
    - CVE-2019-19687

Date: 2020-01-24 19:53:15.613426+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/keystone/2:16.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Eoan-changes mailing list