Publishing details

Changelog

nova (2:17.0.13-0ubuntu5.3) bionic-security; urgency=medium

  * SECURITY UPDATE: information disclosure vulnerability
    - debian/patches/CVE-2015-9543.patch: Mask the token used to allow
      access to consoles
    - CVE-2015-9543
  * SECURITY UPDATE: machine takeover vulnerability
    - debian/patches/CVE-2020-17376.patch: libvirt: Provide
      VIR_MIGRATE_PARAM_PERSIST_XML during live migration
    - CVE-2020-17376
  * SECURITY UPDATE: open redirect vulnerability
    - debian/patches/CVE-2021-3654-*.patch: Reject open redirection in the
      console proxy
    - CVE-2021-3654

 -- Nishit Majithia <email address hidden>  Fri, 10 Feb 2023 14:20:43 +0530

Available diffs

Builds

Built packages

Package files