Bug#912714: mistral: CVE-2018-16849: std.ssh action may disclose presence of arbitrary files

2018-11-05 Thread Salvatore Bonaccorso
Hi Thomas, On Mon, Nov 05, 2018 at 03:52:57PM +0100, Thomas Goirand wrote: > On 11/3/18 8:26 AM, Salvatore Bonaccorso wrote: > > Source: mistral > > Version: 7.0.0-1 > > Severity: grave > > Tags: patch security upstream > > Forwarded: https://bugs.launchpad.net/mistral/+bug/1783708 > > > > Hi, >

Bug#912714: mistral: CVE-2018-16849: std.ssh action may disclose presence of arbitrary files

2018-11-05 Thread Thomas Goirand
On 11/3/18 8:26 AM, Salvatore Bonaccorso wrote: > Source: mistral > Version: 7.0.0-1 > Severity: grave > Tags: patch security upstream > Forwarded: https://bugs.launchpad.net/mistral/+bug/1783708 > > Hi, > > The following vulnerability was published for mistral. > > CVE-2018-16849[0]: > | A flaw

Bug#912714: mistral: CVE-2018-16849: std.ssh action may disclose presence of arbitrary files

2018-11-03 Thread Salvatore Bonaccorso
Source: mistral Version: 7.0.0-1 Severity: grave Tags: patch security upstream Forwarded: https://bugs.launchpad.net/mistral/+bug/1783708 Hi, The following vulnerability was published for mistral. CVE-2018-16849[0]: | A flaw was found in openstack-mistral. By manipulating the SSH private | key f