UbuntuUpdates.org

Package "cinder-api"

Name: cinder-api

Description:

Cinder storage service - API server

Latest version: 2:21.1.0-0ubuntu2.2
Release: kinetic (22.10)
Level: security
Repository: main
Head package: cinder
Homepage: https://launchpad.net/cinder

Links


Download "cinder-api"


Other versions of "cinder-api" in Kinetic

Repository Area Version
base main 2:21.0.0-0ubuntu1
updates main 2:21.2.0-0ubuntu1
proposed main 2:21.2.0-0ubuntu1

Changelog

Version: 2:21.1.0-0ubuntu2.2 2023-05-23 14:07:32 UTC

  cinder (2:21.1.0-0ubuntu2.2) kinetic-security; urgency=medium

  * SECURITY REGRESSION: Regressions in other projects (LP: #2020111)
    - debian/patches/series: Do not apply CVE-2023-2088.patch until
      patches are ready for all upstream OpenStack projects.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Thu, 18 May 2023 11:25:01 -0400

Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 2:21.1.0-0ubuntu2.1 2023-05-11 19:07:18 UTC

  cinder (2:21.1.0-0ubuntu2.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access
    - debian/patches/CVE-2023-2088.patch: Reject unsafe delete
      attachment calls.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Thu, 04 May 2023 15:30:12 +0200

Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 2:21.1.0-0ubuntu1 2023-01-31 15:07:19 UTC

  cinder (2:21.1.0-0ubuntu1) kinetic-security; urgency=medium

  * d/gbp.conf: Create stable/zed branch.
  * New stable point release for OpenStack Zed (LP: #2004029).

 -- Corey Bryant <email address hidden> Fri, 27 Jan 2023 10:54:13 -0500

2004029 [SRU] zed stable releases



About   -   Send Feedback to @ubuntu_updates