Debian alert DLA-4391-1 (python-mistralclient)

From:
             
 
Daniel Leidert <dleidert@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4391-1] python-mistralclient security update
Date:
             
 
Mon, 01 Dec 2025 06:28:48 +0100
Message-ID:
             
 
<8f07cf4207514468d45a22188856fbf1b8baa7ea.camel@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4391-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Daniel Leidert
December 01, 2025                             https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : python-mistralclient
Version        : 1:4.1.1-2+deb11u1
CVE ID         : CVE-2021-4472


A local file inclusion vulnerability has been discovered in python-
mistralclient, the OpenStack Workflow as a Service client, that may
result in disclosure of arbitrary local files content through the
'Create Workbook' feature.


For Debian 11 bullseye, this problem has been fixed in version
1:4.1.1-2+deb11u1.

We recommend that you upgrade your python-mistralclient packages.

For the detailed security status of python-mistralclient please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/python-mistra...

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=v77N
-----END PGP SIGNATURE-----