[ubuntu/focal-updates] tcmu 1.5.2-5ubuntu0.20.04.1 (Accepted)

[Ubuntu Archive Robot]

tcmu (1.5.2-5ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Access control bypass vulnerability
    - debian/patches/CVE-2021-3139_1.patch: fail cross-device XCOPY requests.
    - debian/patches/CVE-2021-3139_2.patch: fail XCOPY requests with inline
      data.
    - debian/patches/CVE-2021-3139_3.patch: don't assume two XCOPY CSCDs.
    - debian/patches/CVE-2021-3139_4.patch: error if both src/dst_dev are unset
      after CSCD.
    - CVE-2021-3139

Date: 2021-01-19 14:54:08.961002+00:00
Changed-By: Paulo Flabiano Smorigo <pfsmorigo at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/tcmu/1.5.2-5ubuntu0.20.04.1
-------------- next part --------------
Sorry, changesfile not available.