Comment 10 for bug 868360

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package nova - 2011.2-0ubuntu1.1

---------------
nova (2011.2-0ubuntu1.1) natty-security; urgency=low

  * SECURITY UPDATE: fix information leak via invalid key
    debina/patches/security-fix-lp868360.patch: adjust nova/auth/manager.py
    to not return access, secret or admin fields for User error and
    project_manager_id, description and member_ids for Project
    - LP: #868360
    - CVE-2011-XXXX
 -- Jamie Strandboge <email address hidden> Tue, 25 Oct 2011 09:04:51 -0500