Publishing details

• Published on 2017-10-11
• Copied from ubuntu trusty in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

glance (1:2014.1.5-0ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: access restrictions bypass via status changing
    - debian/patches/CVE-2015-5251.patch: prevent image status being
      directly modified in glance/api/v1/__init__.py,
      glance/api/v1/images.py, glance/tests/functional/v1/test_api.py,
      glance/tests/integration/legacy_functional/test_v1_api.py,
      test-requirements.txt.
    - CVE-2015-5251
  * SECURITY UPDATE: storage quota bypass
    - debian/patches/CVE-2015-5286.patch: cleanup chunks for deleted image
      if token expired in glance/api/v1/upload_utils.py,
      glance/api/v2/image_data.py.
    - CVE-2015-5286
  * SECURITY UPDATE: image status manipulation through locations removal
    - debian/patches/CVE-2016-0757.patch: prevent user from removing last
      location of the image in glance/api/v2/images.py,
      glance/tests/functional/v2/test_images.py,
      glance/tests/unit/v2/test_images_resource.py.
    - CVE-2016-0757

 -- Marc Deslauriers <email address hidden>  Fri, 25 Aug 2017 13:10:04 -0400

Builds

• i386

Built packages

• glance OpenStack Image Registry and Delivery Service - Daemons

• glance-api OpenStack Image Registry and Delivery Service - API

• glance-common OpenStack Image Registry and Delivery Service - Common

• glance-registry OpenStack Image Registry and Delivery Service - Registry

• python-glance OpenStack Image Registry and Delivery Service - Python library

• python-glance-doc OpenStack Image Registry and Delivery Service - Documentation

Package files

• glance-api_2014.1.5-0ubuntu1.1_all.deb (22.2 KiB)
• glance-common_2014.1.5-0ubuntu1.1_all.deb (6.4 KiB)
• glance-registry_2014.1.5-0ubuntu1.1_all.deb (6.8 KiB)
• glance_2014.1.5-0ubuntu1.1.debian.tar.gz (20.7 KiB)
• glance_2014.1.5-0ubuntu1.1.dsc (3.0 KiB)
• glance_2014.1.5-0ubuntu1.1_all.deb (1.7 KiB)
• glance_2014.1.5.orig.tar.gz (2.0 MiB)
• python-glance-doc_2014.1.5-0ubuntu1.1_all.deb (515.1 KiB)
• python-glance_2014.1.5-0ubuntu1.1_all.deb (393.5 KiB)