CVEs related to bugs in juju-core

Open bugs

Bug	CVE(s)
Bug #1465307: 1.24.0: Lots of "agent is lost, sorry!" messages	CVE-2015-7547
juju-core	New (unassigned)

Resolved bugs

Bug	CVE(s)
Bug #1415671: Joyent provider uploads user's private ssh key by default	CVE-2015-1316
juju-core	Fix released, assigned to Nate Finch
Bug #1682411: juju-run unit root escalation vulnerability	CVE-2017-9232
juju-core	Fix released, assigned to John A Meinel
Bug #1727355: Juju attempts to bootstrap bionic by default	CVE-2017-9232
juju-core	Won't fix (unassigned)