Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

openstack-nova: directory traversal

Package(s):

openstack-nova

CVE #(s):

CVE-2011-4596

Created:

December 23, 2011

Updated:

January 20, 2012

Description:

Prevent potential directory traversal with malicious EC2 image tarballs, by making sure the tarfile is safe before unpacking it.

Prevent potential directory traversal with malicious file names in EC2 image manifests.

Alerts:

Fedora	FEDORA-2011-17111	2011-12-14
Fedora	FEDORA-2012-0682	2012-01-19

(Log in to post comments)