[ubuntu/mantic-proposed] nova 3:27.0.0-0ubuntu4 (Accepted)

Corey Bryant corey.bryant at canonical.com
Wed May 31 19:26:12 UTC 2023


nova (3:27.0.0-0ubuntu4) mantic; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
    - debian/patches/CVE-2023-2088-1.patch: Use force=True for os-brick
      disconnect during delete.
    - debian/patches/CVE-2023-2088-2.patch: Enable use of service user
      token with admin context.
    - CVE-2023-2088

Date: Wed, 31 May 2023 12:11:02 -0400
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/nova/3:27.0.0-0ubuntu4
-------------- next part --------------
Format: 1.8
Date: Wed, 31 May 2023 12:11:02 -0400
Source: nova
Built-For-Profiles: noudeb
Architecture: source
Version: 3:27.0.0-0ubuntu4
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Launchpad-Bugs-Fixed: 2021980
Changes:
 nova (3:27.0.0-0ubuntu4) mantic; urgency=medium
 .
   * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
     - debian/patches/CVE-2023-2088-1.patch: Use force=True for os-brick
       disconnect during delete.
     - debian/patches/CVE-2023-2088-2.patch: Enable use of service user
       token with admin context.
     - CVE-2023-2088
Checksums-Sha1:
 28749ec3fe401dd092af3c4542262aa6099ca408 6854 nova_27.0.0-0ubuntu4.dsc
 6369dc8b65c61586ad6da4d989e8001ff6c1dfd0 9481861 nova_27.0.0.orig.tar.gz
 43b290ed96ea9216cce98e6d931c67d0cbcea9f9 50804 nova_27.0.0-0ubuntu4.debian.tar.xz
 877dac2b9992a456d684681cca8702fb9da494fb 9184 nova_27.0.0-0ubuntu4_source.buildinfo
Checksums-Sha256:
 590db152e01669a12c63e9a2f3da62fa1fdd3af7ff35d2861e0378d03716ee31 6854 nova_27.0.0-0ubuntu4.dsc
 908eaa81616355883be8a81918c650a8eccac87c4a04794421c2e602d7c25c9f 9481861 nova_27.0.0.orig.tar.gz
 72849e41473221ff857924656d3be9dfc04213787331ed5046e6b7588ec7dce4 50804 nova_27.0.0-0ubuntu4.debian.tar.xz
 a9738946ddbfecb03da0319ebd0d415be24cc227b81a0233ab37d21f27ec3b85 9184 nova_27.0.0-0ubuntu4_source.buildinfo
Files:
 304db49208d310acb0aa8be9c8b69ed0 6854 net extra nova_27.0.0-0ubuntu4.dsc
 45690da1248cdccaeb6fd0b4b19bfd0d 9481861 net extra nova_27.0.0.orig.tar.gz
 e938cee7903bf9495ba5fac7532b178c 50804 net extra nova_27.0.0-0ubuntu4.debian.tar.xz
 9f29f77ad69f08f3dc72aa57cb737cc9 9184 net extra nova_27.0.0-0ubuntu4_source.buildinfo
Original-Maintainer: Openstack Maintainers <openstack at lists.launchpad.net>


More information about the mantic-changes mailing list