Debian alert DSA-6315-1 (cyborg)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6315-1] cyborg security update
Date:
             
 
Sun, 31 May 2026 18:39:09 +0000
Message-ID:
             
 
<ahyATV8dPJ-g6Awl@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6315-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
May 31, 2026                          https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : cyborg
CVE ID         : CVE-2026-40213 CVE-2026-40214

Two security vulnerabilities have been discovered in Cyborg, the
OpenStack component for management of hardware accelerators, which could
result in incomplete access controls.

For the stable distribution (trixie), these problems have been fixed in
version 14.0.0-3+deb13u1.

We recommend that you upgrade your cyborg packages.

For the detailed security status of cyborg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/cyborg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Wb+C
-----END PGP SIGNATURE-----