[Bug 968411] [NEW] [Precise] nova is vulnerable to CVE-2012-1585

[Launchpad Bug Tracker]

*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Tyler Hicks (tyhicks):

Nova is vulnerable to storage resource exhaustion via the Nova API log
file. Invalid requests can be made, using extremely long server names,
which result in the log file growing considerably large.

I've addressed this issue in Oneiric and Natty, but need a sponsor for
Precise. Debdiff to soon follow.

** Affects: nova (Ubuntu)
     Importance: Medium
         Status: Confirmed

-- 
[Precise] nova is vulnerable to CVE-2012-1585
https://bugs.launchpad.net/bugs/968411
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.