[ubuntu/eoan-updates] keystone 2:16.0.0-0ubuntu1.1 (Accepted)

Thu Jan 30 13:28:07 UTC 2020

keystone (2:16.0.0-0ubuntu1.1) eoan-security; urgency=medium

  * SECURITY UPDATE: data leakage in the list credentials API
    - debian/patches/CVE-2019-19687.patch: fix credential list for project
      members in keystone/api/credentials.py,
      keystone/tests/protection/v3/test_credentials.py,
      releasenotes/notes/bug-1855080-08b28181b7cb2470.yaml.
    - CVE-2019-19687

Date: 2020-01-24 19:53:15.613426+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/keystone/2:16.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.