tocsin

Debian/cinder: unknown

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a Proc

Action: Upgrade cinder to 2014.1.3-4 or later.

Affected

introducedfixedlast affected
02014.1.3-4-

Fixed versions

2014.1.3-4

Sources

published · modified · JSON