tocsin

Debian/glance: medium 5

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and r

Action: Upgrade glance to 2:25.1.0-2+deb12u2 or later.

Affected

introducedfixedlast affected
02:25.1.0-2+deb12u2-

Fixed versions

2:25.1.0-2+deb12u2

Sources

published · modified · JSON