This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2015-7514 →
DEBIAN-CVE-2015-7514
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
Original description
The description as published by the source.
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
ironic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.2-1"}]}]
Debian:13
ironic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.2-1"}]}]
Debian:14
ironic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.2-1"}]}]
References
- advisory security-tracker.debian.org