[openstack-announce] [OSSA-2023-002] Cinder, Glance, Nova: Arbitrary file access through custom VMDK flat descriptor (CVE-2022-47951)

Jake Yip jake.yip at ardc.edu.au
Tue Feb 7 02:32:40 UTC 2023


On 2/2/23 07:15, Thomas Goirand wrote:> FYI, I plan to support from 
Rocky to Zed the above way until Debian
> Buster (LTS) is EOL. I hope all Debian users appreciate the amount of 
> work I've put into this, and hope this will get more traction to Debian, 
> knowing we are now engaged in a 5 years support.
> 

Hi Thomas,

We, downstream users using the packages, definitely appreciate the hard 
work you have put into packaging.

Cheers,
Jake



More information about the openstack-discuss mailing list