[ubuntu/quantal-security] glance 2012.2-0ubuntu2.2 (Accepted)

Jamie Strandboge jamie at ubuntu.com
Thu Nov 8 16:20:21 UTC 2012


glance (2012.2-0ubuntu2.2) quantal-security; urgency=low

  * SECURITY UPDATE: deletion of arbitrary public and shared images via
    authenticated user
    - debian/patches/CVE-2012-4573.patch: adjust glance/api/v1/images.py to
      ensure image is owned by user before delayed_deletion
    - CVE-2012-4573
  * debian/patches/fakeauth-not-always-admin.patch: add required testsuite
    patch in support of the testsuite changes in CVE-2012-4573.patch

Date: 2012-11-08 14:05:16.016549+00:00
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: OpenStack Ubuntu packagers <openstack-packaging at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/glance/2012.2-0ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Quantal-changes mailing list