Ubuntu

“nova” 2012.2.3-0ubuntu2 source package in The Quantal Quetzal

Publishing history

2012.2.3-0ubuntu2
SUPERSEDED: Quantal pocket Updates in component main and section net
  • Removed from disk on 2013-05-18.
  • Removal requested on 2013-05-17.
  • Superseded on 2013-05-16 by nova - 2012.2.3-0ubuntu2.1
  • Published on 2013-04-25
2012.2.3-0ubuntu2
DELETED: Quantal pocket Proposed in component main and section net
  • Removed from disk on 2013-05-18.
  • Removal requested on 2013-04-25.
  • Deleted on 2013-04-25 by Adam Conrad

    moved to -updates

  • Published on 2013-04-10

Changelog

nova (2012.2.3-0ubuntu2) quantal-proposed; urgency=low

  * Re-sync with latest security updates.
  * SECURITY UPDATE: fix denial of service via fixed IPs when using extensions
    - debian/patches/CVE-2013-1838.patch: add explicit quota for fixed IP
    - CVE-2013-1838
  * SECURITY UPDATE: fix VNC token validation
    - debian/patches/CVE-2013-0335.patch: force console auth service to flush
      all tokens associated with an instance when it is deleted
    - CVE-2013-0335
  * SECURITY UPDATE: fix denial of service
    - CVE-2013-1664.patch: Add a new utils.safe_minidom_parse_string function
      and update external API facing Nova modules to use it
    - CVE-2013-1664
 -- James Page <email address hidden>   Fri, 22 Mar 2013 12:40:07 +0000