Comment 9 for bug 868360

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package nova - 2011.3-0ubuntu6.2

---------------
nova (2011.3-0ubuntu6.2) oneiric-security; urgency=low

  * SECURITY UPDATE: fix information leak via invalid key
    debina/patches/security-fix-lp868360.patch: adjust nova/auth/manager.py
    to not return access, secret or admin fields for User error and
    project_manager_id, description and member_ids for Project
    - LP: #868360
    - CVE-2011-XXXX
 -- Jamie Strandboge <email address hidden> Tue, 25 Oct 2011 08:57:02 -0500