[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3431-2 ganeti -- ganeti

ID: oval:org.secpod.oval:def:602331Date: (C)2016-01-27   (M)2021-09-13
Class: PATCHFamily: unix




The update for ganeti issued as DSA-3431-1 causes the gnt-instance info command to fail for all instances of type DRBD. Updated packages are now available to address this regression. For reference the original advisory text follows. Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak.

Platform:
Debian 8.x
Debian 7.x
Product:
ganeti
ganeti2
Reference:
DSA-3431-2
CPE    4
cpe:/a:ganeti_project:ganeti2
cpe:/o:debian:debian_linux:7.x
cpe:/o:debian:debian_linux:8.x
cpe:/a:ganeti_project:ganeti
...

© SecPod Technologies