[ubuntu/precise-security] nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1_i386_translations.tar.gz, nova 2012.1+stable~20120612-3ee026e-0ubuntu1.1 (Accepted)
Steve Beattie
sbeattie at ubuntu.com
Tue Jul 3 16:33:51 UTC 2012
nova (2012.1+stable~20120612-3ee026e-0ubuntu1.1) precise-security; urgency=low
* SECURITY UPDATE: arbitrary file injection/corruption
- debian/patches/CVE-2012-3360+3361.patch: ensure that files cannot
be injected in arbitrary locations
- CVE-2012-3360
- CVE-2012-3361
Date: Mon, 02 Jul 2012 19:54:17 -0700
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/nova/2012.1+stable~20120612-3ee026e-0ubuntu1.1
-------------- next part --------------
Format: 1.8
Date: Mon, 02 Jul 2012 19:54:17 -0700
Source: nova
Binary: python-nova nova-common nova-compute nova-compute-lxc nova-compute-uml nova-compute-xen nova-compute-qemu nova-compute-kvm nova-compute-xcp nova-xcp-plugins nova-xcp-network nova-cert nova-scheduler nova-volume nova-ajax-console-proxy nova-vncproxy nova-api nova-network nova-objectstore nova-console nova-consoleauth nova-doc nova-api-metadata nova-api-os-compute nova-api-os-volume nova-api-ec2
Architecture: source
Version: 2012.1+stable~20120612-3ee026e-0ubuntu1.1
Distribution: precise-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description:
nova-ajax-console-proxy - OpenStack Compute - AJAX console proxy - transitional package
nova-api - OpenStack Compute - API frontend
nova-api-ec2 - OpenStack Compute - EC2 API frontend
nova-api-metadata - OpenStack Compute - metadata API frontend
nova-api-os-compute - OpenStack Compute - OpenStack Compute API frontend
nova-api-os-volume - OpenStack Compute - OpenStack Volume API frontend
nova-cert - OpenStack Compute - certificate management
nova-common - OpenStack Compute - common files
nova-compute - OpenStack Compute - compute node
nova-compute-kvm - OpenStack Compute - compute node (KVM)
nova-compute-lxc - OpenStack Compute - compute node (LXC)
nova-compute-qemu - OpenStack Compute - compute node (QEmu)
nova-compute-uml - OpenStack Compute - compute node (UserModeLinux)
nova-compute-xcp - OpenStack Compute - compute node (XCP)
nova-compute-xen - OpenStack Compute - compute node (Xen)
nova-console - OpenStack Compute - Console
nova-consoleauth - OpenStack Compute - Console Authenticator
nova-doc - OpenStack Compute - documentation
nova-network - OpenStack Compute - Network manager
nova-objectstore - OpenStack Compute - object store
nova-scheduler - OpenStack Compute - virtual machine scheduler
nova-vncproxy - OpenStack Compute - VNC proxy
nova-volume - OpenStack Compute - storage
nova-xcp-network - OpenStack Compute network plugin for the Xen Cloud Platform
nova-xcp-plugins - OpenStack Compute plugin for the Xen Cloud Platform
python-nova - OpenStack Compute Python libraries
Changes:
nova (2012.1+stable~20120612-3ee026e-0ubuntu1.1) precise-security; urgency=low
.
* SECURITY UPDATE: arbitrary file injection/corruption
- debian/patches/CVE-2012-3360+3361.patch: ensure that files cannot
be injected in arbitrary locations
- CVE-2012-3360
- CVE-2012-3361
Checksums-Sha1:
6b192f5ada4229021414d7b4405cee7a96d855b1 4126 nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.dsc
e0acdccc92b62b8540bb1537b79f51ae4eec449c 46654 nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.debian.tar.gz
Checksums-Sha256:
e0d0037dfcab0276fdf2b5935ab14b8a4b08a3fc1dc76027a8920a7ae5b8b66e 4126 nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.dsc
3c58ce4f0cbb72ab6b0a53eb8c13ef3f70bea6e3ed08e0ca1f348e5217af63e5 46654 nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.debian.tar.gz
Files:
a656962fccfe7b33536aab4a7a846e03 4126 net extra nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.dsc
e8d398aca32b74d2803a3b66be790f44 46654 net extra nova_2012.1+stable~20120612-3ee026e-0ubuntu1.1.debian.tar.gz
Original-Maintainer: Openstack Maintainers <openstack at lists.launchpad.net>
More information about the Precise-changes
mailing list