Debian LTS Linux Distribution - Security Advisories | LinuxSecurity...

Debian LTS Linux Distribution

Find the information you need for your favorite open source distribution .

Debian LTS: DLA-3302-1: nova security update

data:image/svg+xml,%3Csvg%20xmlns=%22https://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

An issue was discovered in Nova, an OpenStack project that provides a way to provision compute instances (aka virtual servers). By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy

Debian LTS: DLA-3301-1: cinder security update

data:image/svg+xml,%3Csvg%20xmlns=%22https://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

An issue was discovered in OpenStack Cinder, a Block Storage service for OpenStack. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the

Debian LTS: DLA-3300-1: glance security update

data:image/svg+xml,%3Csvg%20xmlns=%22https://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

An issue was discovered in Glance, OpenStack Image Registry and Delivery Service - Daemons. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the

Debian LTS: DLA-3299-1: node-qs security update

data:image/svg+xml,%3Csvg%20xmlns=%22https://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Nathanael Braun and Johan Brissaud discovered a prototype poisoning vulnerability in node-qs, a Node.js module to parse and stringify query strings. node-qs 6.5.x before 6.5.3 allows for instance the creation of array-like objects by setting an Array in the `__ proto__` property; the

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.