UbuntuUpdates.org

Package "amphora-agent"

Name: amphora-agent

Description:

OpenStack Load Balancer Service - Amphora agent
Latest version: 1:10.1.1-0ubuntu1.5
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: octavia
Homepage: https://github.com/openstack/octavia

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "amphora-agent"

All arch deb package
APT INSTALL

Other versions of "amphora-agent" in Jammy

Repository Area Version
base universe 1:10.0.0-0ubuntu1
security universe 1:10.1.1-0ubuntu1.5

Changelog

Version: 1:10.1.1-0ubuntu1.5 2026-09-24 18:07:24 UTC

octavia (1:10.1.1-0ubuntu1.5) jammy-security; urgency=medium

  * Fix HAProxy configuration injection vulnerabilities (LP: 2167565):
    - d/p/lp2167565-1-fix-haproxy-config-injection-via-l7-redirect-
      urls.patch: Reject invalid L7 policy redirect URLs (CVE-2026-94571).
    - d/p/lp2167565-2-fix-haproxy-config-injection-via-tls-ciphers.patch:
      Reject invalid TLS cipher strings (CVE-2026-94572).
  * d/rules: Disable eventlet greendns during the package build to avoid
    resolver initialization in isolated build environments.
  * Fix unauthorized QoS policy deletion lock (LP: 2161500):
    - d/p/lp2161500-fix-qos-policy-validation-request-context.patch:
      Use the user's request context when validating QoS policies
      (CVE-2026-74248).

 -- Guillaume Boutry Tue, 22 Sep 2026 10:39:13 +0200
Source diff to previous version
CVE-2026-94571 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix f
CVE-2026-94572 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The
CVE-2026-74248 OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphor

Version: 1:10.1.1-0ubuntu1.4 2026-04-01 11:10:26 UTC

  octavia (1:10.1.1-0ubuntu1.4) jammy; urgency=medium

  * Fix octavia API erroring if a provider driver cannot be loaded
    (LP: #2141119)
    - d/p/lp2141119-1-dont-fail-if-provider-driver-cant-load.patch
    - d/p/lp2141119-2-remove-failed-drivers.patch

 -- Zachary Raines <email address hidden> Tue, 10 Mar 2026 16:33:29 -0500
Source diff to previous version

Version: 1:10.1.1-0ubuntu1.3 2025-09-19 02:20:08 UTC

  octavia (1:10.1.1-0ubuntu1.3) jammy; urgency=medium

  * Fix asymmetric routing issue in ACTIVE_STANDBY topology by adding default
    route to keepalived template. (LP: #2117280)
    - d/p/lp2117280-fix-active-standby-asymmetric-routing.patch

 -- Bryan Fraschetti <email address hidden> Wed, 16 Jul 2025 14:40:57 -0400
Source diff to previous version
2117280 [SRU] Asymmetric routing issue on amphorae in ACTIVE_STANDBY topology

Version: 1:10.1.1-0ubuntu1.2 2025-04-08 18:07:34 UTC

  octavia (1:10.1.1-0ubuntu1.2) jammy; urgency=medium

  * Fix loadbalancer stuck in PENDING_DELETE in cascade delete
    with TERMINATED_HTTPS listener if TLS storage not available.
    (LP: #2077348)
    - d/p/lp2077348-fix-loadbalancer-stuck-in-cascade-delete.patch

 -- Zhang Hua <email address hidden> Tue, 18 Mar 2025 14:52:52 +1300
Source diff to previous version

Version: 1:10.1.1-0ubuntu1.1 2024-11-07 17:07:05 UTC

  octavia (1:10.1.1-0ubuntu1.1) jammy; urgency=medium

  [ Zhang Hua ]
  * d/p/add-check-for-duplicate-members-in-batch-update.patch (LP: #2067441)

 -- James Page <email address hidden> Tue, 20 Aug 2024 11:00:03 +0100


About   -   Send Feedback to @ubuntu_updates