[Secure-testing-team] Bug#728605: nova: CVE-2013-4463 and CVE-2013-4469
Salvatore Bonaccorso
carnil at debian.org
Sun Nov 3 14:27:05 UTC 2013
Package: nova
Severity: important
Tags: security upstream patch
Hi,
the following vulnerabilities were published for nova.
CVE-2013-4463[0]:
Compressed disk image DoS
CVE-2013-4469[1]:
Denial of Service (Incomplete fix for CVE-2013-2096)
Red Hat Bugzillla provides patches for both CVE's at [2] (note the CVE
split, but the patches are found in [2]).
If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.
For further information see:
[0] http://security-tracker.debian.org/tracker/CVE-2013-4463
[1] http://security-tracker.debian.org/tracker/CVE-2013-4469
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1023239
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1023581
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
More information about the Secure-testing-team
mailing list