Debian/octavia: unknown
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into the HAProxy configur
Action: Upgrade octavia to 18.0.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.0.0-4 | - |
Fixed versions
| 18.0.0-4 |
Sources
- osv: DEBIAN-CVE-2026-94572#Debian:14/octavia
- https://security-tracker.debian.org/tracker/CVE-2026-94572
published · modified · JSON