UbuntuUpdates.org

Package "amphora-agent"

Name: amphora-agent

Description:

OpenStack Load Balancer Service - Amphora agent
Latest version: 1:14.0.0-0ubuntu1.6
Release: noble (24.04)
Level: updates
Repository: universe
Head package: octavia
Homepage: https://opendev.org/openstack/octavia

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "amphora-agent"

All arch deb package
APT INSTALL

Other versions of "amphora-agent" in Noble

Repository Area Version
base universe 1:14.0.0-0ubuntu1
security universe 1:14.0.0-0ubuntu1.6

Changelog

Version: 1:14.0.0-0ubuntu1.6 2026-09-24 18:07:28 UTC

octavia (1:14.0.0-0ubuntu1.6) noble-security; urgency=medium

  * Fix HAProxy configuration injection vulnerabilities (LP: 2167565):
    - d/p/lp2167565-1-fix-haproxy-config-injection-via-l7-redirect-
    urls.patch: Reject invalid L7 policy redirect URLs (CVE-2026-94571).
    - d/p/lp2167565-2-fix-haproxy-config-injection-via-tls-ciphers.patch:
    Reject invalid TLS cipher strings (CVE-2026-94572).
  * Fix unauthorized QoS policy deletion lock (LP: 2161500):
    - d/p/lp2161500-fix-qos-policy-validation-request-context.patch:
      Use the user's request context when validating QoS policies
      (CVE-2026-74248).

 -- Guillaume Boutry Tue, 22 Sep 2026 10:39:12 +0200
Source diff to previous version
CVE-2026-94571 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix f
CVE-2026-94572 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The
CVE-2026-74248 OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphor

Version: 1:14.0.0-0ubuntu1.5 2026-06-02 12:07:46 UTC

  octavia (1:14.0.0-0ubuntu1.5) noble; urgency=medium

  [ Wesley Hershberger ]
  * Fix OOM condition for large TERMINATED_HTTPS loadbalancers (LP: #2119987)
    - d/p/lp-2119987-Reduce-tune-ssl-cachesize-for-HTTPS-listeners.patch

 -- Zachary Raines <email address hidden> Thu, 02 Apr 2026 15:14:22 -0500
Source diff to previous version

Version: 1:14.0.0-0ubuntu1.4 2026-04-01 11:10:32 UTC

  octavia (1:14.0.0-0ubuntu1.4) noble; urgency=medium

  * Fix octavia API erroring if a provider driver cannot be loaded
    (LP: #2141119)
    - d/p/lp2141119-1-dont-fail-if-provider-driver-cant-load.patch
    - d/p/lp2141119-2-remove-failed-drivers.patch

 -- Zachary Raines <email address hidden> Tue, 10 Mar 2026 13:29:39 -0500
Source diff to previous version

Version: 1:14.0.0-0ubuntu1.3 2025-04-08 18:07:39 UTC

  octavia (1:14.0.0-0ubuntu1.3) noble; urgency=medium

  * Fix loadbalancer stuck in PENDING_DELETE in cascade delete
    with TERMINATED_HTTPS listener if TLS storage not available.
    (LP: #2077348)
    - d/p/lp2077348-fix-loadbalancer-stuck-in-cascade-delete.patch

 -- Zhang Hua <email address hidden> Tue, 18 Mar 2025 14:47:15 +1300
Source diff to previous version

Version: 1:14.0.0-0ubuntu1.2 2024-11-07 18:06:58 UTC

  octavia (1:14.0.0-0ubuntu1.2) noble; urgency=medium

  [ James Page ]
  * d/gbp.conf, .launchpad.yaml: Sync from cloud-archive-tools for
    caracal.

  [ Zhang Hua ]
  * d/p/add-check-for-duplicate-members-in-batch-update.patch (LP: #2067441)

 -- James Page <email address hidden> Tue, 20 Aug 2024 10:57:16 +0100


About   -   Send Feedback to @ubuntu_updates