[ubuntu/mantic-updates] cinder 2:23.0.0-0ubuntu1.4 (Accepted)

[Ubuntu Archive Robot]

cinder (2:23.0.0-0ubuntu1.4) mantic-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access via custom QCOW2 external data
    (LP: #2059809)
    - debian/patches/CVE-2024-32498.patch: check for external qcow2 data
      file.
    - debian/control: added qemu-utils to Build-Depends so qemu-img is
      available for new tests.
    - CVE-2024-32498

Date: 2024-06-28 21:52:11.260937+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/cinder/2:23.0.0-0ubuntu1.4
-------------- next part --------------
Sorry, changesfile not available.