tocsin

Debian/glance: unknown

In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the

Action: Upgrade glance to 2:25.1.0-2+deb12u5 or later.

Affected

introducedfixedlast affected
02:25.1.0-2+deb12u5-

Fixed versions

2:25.1.0-2+deb12u5

Sources

published · modified · JSON