ganeti: CVE-2015-7945: DRBD secret leak

Related Vulnerabilities: CVE-2015-7945  

Debian Bug report logs - #809538
ganeti: CVE-2015-7945: DRBD secret leak

version graph

Reported by: Antoine Beaupré <anarcat@debian.org>

Date: Thu, 31 Dec 2015 21:15:02 UTC

Severity: important

Tags: fixed-upstream, security, upstream

Found in versions ganeti/2.15.1-2, ganeti/2.5.2-1

Fixed in versions ganeti/2.15.2-1, ganeti/2.5.2-1+deb7u1, ganeti/2.12.4-1+deb8u2

Done: Salvatore Bonaccorso <carnil@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, k, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian Ganeti Team <pkg-ganeti-devel@lists.alioth.debian.org>:
Bug#809538; Package src:ganeti. (Thu, 31 Dec 2015 21:15:05 GMT) (full text, mbox, link).


Acknowledgement sent to Antoine Beaupré <anarcat@debian.org>:
New Bug report received and forwarded. Copy sent to k, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian Ganeti Team <pkg-ganeti-devel@lists.alioth.debian.org>. (Thu, 31 Dec 2015 21:15:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Antoine Beaupré <anarcat@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Subject: CVE-2015-7945: DRBD secret leak
Date: Thu, 31 Dec 2015 16:11:58 -0500
Source: ganeti
Version: 2.15.1-2
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for tiff.

CVE-2015-7945[0]: DRBD secret leak

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-7945
[1] http://www.ocert.org/advisories/ocert-2015-012.html

Regards,
Antoine


-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable'), (500, 'oldstable'), (1, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-0.bpo.1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_CA.UTF-8, LC_CTYPE=fr_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Changed Bug title to 'ganeti: CVE-2015-7945: DRBD secret leak' from 'Subject: CVE-2015-7945: DRBD secret leak' Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 07:21:03 GMT) (full text, mbox, link).


Added tag(s) fixed-upstream. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 07:21:04 GMT) (full text, mbox, link).


Marked as found in versions ganeti/2.5.2-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 07:21:06 GMT) (full text, mbox, link).


Marked as fixed in versions ganeti/2.15.2-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 07:21:15 GMT) (full text, mbox, link).


Marked Bug as done Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 07:21:16 GMT) (full text, mbox, link).


Notification sent to Antoine Beaupré <anarcat@debian.org>:
Bug acknowledged by developer. (Fri, 01 Jan 2016 07:21:17 GMT) (full text, mbox, link).


Message sent on to Antoine Beaupré <anarcat@debian.org>:
Bug#809538. (Fri, 01 Jan 2016 07:21:24 GMT) (full text, mbox, link).


Message #20 received at 809538-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: control@bugs.debian.org
Cc: 809537-submitter@bugs.debian.org, 809538-submitter@bugs.debian.org
Subject: closing 809537, closing 809538
Date: Fri, 01 Jan 2016 08:18:19 +0100
close 809537 2.15.2-1
close 809538 2.15.2-1
thanks




Marked as fixed in versions ganeti/2.12.4-1+deb8u2. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 19:39:12 GMT) (full text, mbox, link).


Marked as fixed in versions ganeti/2.5.2-1+deb7u1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 01 Jan 2016 19:39:13 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 23 Feb 2016 07:33:26 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 16:50:24 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.