Commit a9e0e685 authored by Lev Lamberov's avatar Lev Lamberov

[SECURITY] [DSA 4234-1] lava-server security update

parent cf41aaf4
<define-tag pagetitle>DSA-4234-1 lava-server</define-tag>
<define-tag report_date>2018-6-22</define-tag>
<define-tag secrefs>CVE-2018-12564 CVE-2018-12565</define-tag>
<define-tag packages>lava-server</define-tag>
<define-tag isvulnerable>yes</define-tag>
<define-tag fixed>yes</define-tag>
<define-tag fixed-section>no</define-tag>
#use wml::debian::security
</dl>
<define-tag description>security update</define-tag>
<define-tag moreinfo>
<p>Two vulnerabilities were discovered in LAVA, a continuous integration
system for deploying operating systems for running tests, which could
result in information disclosure of files readable by the lavaserver
system user or the execution of arbitrary code via a XMLRPC call.</p>
<p>For the stable distribution (stretch), these problems have been fixed in
version 2016.12-3.</p>
<p>We recommend that you upgrade your lava-server packages.</p>
<p>For the detailed security status of lava-server please refer to
its security tracker page at:
<a href="https://security-tracker.debian.org/tracker/lava-server">\
https://security-tracker.debian.org/tracker/lava-server</a></p>
</define-tag>
# do not modify the following line
#include "$(ENGLISHDIR)/security/2018/dsa-4234.data"
# $Id: $
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment