[ubuntu/groovy-updates] tcmu 1.5.2-5ubuntu0.20.10.1 (Accepted)

[Ubuntu Archive Robot]

tcmu (1.5.2-5ubuntu0.20.10.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Access control bypass vulnerability
    - debian/patches/CVE-2021-3139_1.patch: fail cross-device XCOPY requests.
    - debian/patches/CVE-2021-3139_2.patch: fail XCOPY requests with inline
      data.
    - debian/patches/CVE-2021-3139_3.patch: don't assume two XCOPY CSCDs.
    - debian/patches/CVE-2021-3139_4.patch: error if both src/dst_dev are unset
      after CSCD.
    - CVE-2021-3139

Date: 2021-01-19 14:54:12.207185+00:00
Changed-By: Paulo Flabiano Smorigo <pfsmorigo at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/tcmu/1.5.2-5ubuntu0.20.10.1
-------------- next part --------------
Sorry, changesfile not available.