UbuntuUpdates.org

Package "python3-glance-store"

Name: python3-glance-store

Description:

OpenStack Image Service store library - Python 3.x
Latest version: 3.0.0-0ubuntu1.4
Release: jammy (22.04)
Level: security
Repository: main
Head package: python-glance-store
Homepage: https://github.com/openstack/glance_store

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-glance-store"

All arch deb package
APT INSTALL

Other versions of "python3-glance-store" in Jammy

Repository Area Version
base main 3.0.0-0ubuntu1
updates main 3.0.0-0ubuntu1.4

Changelog

Version: 3.0.0-0ubuntu1.4 2024-02-12 14:06:54 UTC

  python-glance-store (3.0.0-0ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: access_key logged in DEBUG log level
    - debian/patches/CVE-2024-1141-1.patch: do not show access_key in
      glance_store/_drivers/s3.py.
    - debian/patches/CVE-2024-1141-2.patch: fix more access_key logging in
      glance_store/_drivers/s3.py.
    - CVE-2024-1141

 -- Marc Deslauriers <email address hidden> Thu, 08 Feb 2024 13:50:11 -0500
Source diff to previous version
CVE-2024-1141 A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level

Version: 3.0.0-0ubuntu1.3 2023-07-24 15:07:06 UTC

  python-glance-store (3.0.0-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
    - debian/patches/CVE-2023-2088.patch: Add force to os-brick
      disconnect.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Wed, 31 May 2023 15:48:16 -0400
Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 3.0.0-0ubuntu1.2 2023-05-23 14:07:28 UTC

  python-glance-store (3.0.0-0ubuntu1.2) jammy-security; urgency=medium

  * SECURITY REGRESSION: Regressions in other projects (LP: #2020111)
    - debian/patches/series: Do not apply CVE-2023-2088.patch until
      patches are ready for all upstream OpenStack projects.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Thu, 18 May 2023 11:12:06 -0400
Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 3.0.0-0ubuntu1.1 2023-05-11 19:07:17 UTC

  python-glance-store (3.0.0-0ubuntu1.1) jammy-security; urgency=medium

  * d/gbp.conf: Create stable/yoga branch.
  * SECURITY UPDATE: Unauthorized File Access
    - debian/patches/CVE-2023-2088.patch: Add force to os-brick
      disconnect.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Mon, 25 Apr 2022 10:02:56 -0400
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments


About   -   Send Feedback to @ubuntu_updates