[ubuntu/mantic-proposed] cinder 2:22.0.0-0ubuntu2 (Accepted)

Corey Bryant corey.bryant at canonical.com
Wed May 10 12:40:16 UTC 2023


cinder (2:22.0.0-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access
    - debian/patches/CVE-2023-2088.patch: Reject unsafe delete
      attachment calls.
    - CVE-2023-2088

Date: Thu, 04 May 2023 13:32:55 +0200
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cinder/2:22.0.0-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 04 May 2023 13:32:55 +0200
Source: cinder
Built-For-Profiles: noudeb
Architecture: source
Version: 2:22.0.0-0ubuntu2
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Changes:
 cinder (2:22.0.0-0ubuntu2) mantic; urgency=medium
 .
   * SECURITY UPDATE: Unauthorized File Access
     - debian/patches/CVE-2023-2088.patch: Reject unsafe delete
       attachment calls.
     - CVE-2023-2088
Checksums-Sha1:
 1f3d28f234ffc7206d4d2dea62c5aa0b85e71ede 5096 cinder_22.0.0-0ubuntu2.dsc
 98c5bd5e9823f960519ff1cf5f60bf64c886958e 6209934 cinder_22.0.0.orig.tar.gz
 310d17c6711a2963012b5b2d9bccc29f7bffd63c 65096 cinder_22.0.0-0ubuntu2.debian.tar.xz
 dc53d61bc7cf996978e4a66baf6c02812d3acf9c 9072 cinder_22.0.0-0ubuntu2_source.buildinfo
Checksums-Sha256:
 8ffcb166fda366e803689d7c3c3772cd0e1b98d0817d09ec082ed1818f616054 5096 cinder_22.0.0-0ubuntu2.dsc
 5116f56061a889c79d5e8a355486958920ed6363d47f8e2a41844e4f7fc542eb 6209934 cinder_22.0.0.orig.tar.gz
 4818534aafda7e6a6ebdce71e69ccd0ab8ffca53278b621607ea1fef89e5c32c 65096 cinder_22.0.0-0ubuntu2.debian.tar.xz
 841e15937ead01d1bb40d042fe7fc64e8dc48dc7b20fb609e76018fc4d0906a7 9072 cinder_22.0.0-0ubuntu2_source.buildinfo
Files:
 f1ae125728b2081305c5c1e8ffe48185 5096 net extra cinder_22.0.0-0ubuntu2.dsc
 8e6495c9b60d3d60ab4157884b737176 6209934 net extra cinder_22.0.0.orig.tar.gz
 0c1f32e0e3ae66e1ce3364bb578ff75f 65096 net extra cinder_22.0.0-0ubuntu2.debian.tar.xz
 db21ff215ff265bd16e73472c42c4213 9072 net extra cinder_22.0.0-0ubuntu2_source.buildinfo
Original-Maintainer: Chuck Short <zulcss at ubuntu.com>


More information about the mantic-changes mailing list