Publishing details

• Removed from disk on 2018-01-19.
• Removal requested on 2018-01-18.
• Published on 2015-08-06
• Copied from ubuntu vivid in PPA for Ubuntu Security Proposed by Seth Arnold

Changelog

cinder (1:2015.1.0-0ubuntu1.1) vivid-security; urgency=medium

  * SECURITY UPDATE: arbitrary file read via crafted qcow2 backing file
    - debian/patches/CVE-2015-1851.patch: disallow backing files in
      cinder/image/image_utils.py, added test to
      cinder/tests/test_image_utils.py.
    - CVE-2015-1851

 -- Marc Deslauriers <email address hidden>  Wed, 22 Jul 2015 10:37:01 -0400

Builds

• amd64

Package files

• cinder-api_2015.1.0-0ubuntu1.1_all.deb (5.2 KiB)
• cinder-backup_2015.1.0-0ubuntu1.1_all.deb (4.9 KiB)
• cinder-common_2015.1.0-0ubuntu1.1_all.deb (5.5 KiB)
• cinder-scheduler_2015.1.0-0ubuntu1.1_all.deb (5.2 KiB)
• cinder-volume_2015.1.0-0ubuntu1.1_all.deb (7.4 KiB)
• cinder_2015.1.0-0ubuntu1.1.debian.tar.xz (13.8 KiB)
• cinder_2015.1.0-0ubuntu1.1.dsc (3.9 KiB)
• cinder_2015.1.0.orig.tar.gz (2.0 MiB)
• python-cinder_2015.1.0-0ubuntu1.1_all.deb (1.2 MiB)