[ubuntu/focal-updates] cinder 2:16.4.2-0ubuntu2.1 (Accepted)

Tue Jan 31 13:58:32 UTC 2023

cinder (2:16.4.2-0ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access
    - debian/patches/CVE-2022-47951.patch: Check VMDK subformat
      against an allowed list.
    - CVE-2022-47951

Date: 2023-01-30 12:31:10.235960+00:00
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/cinder/2:16.4.2-0ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.