Package: octavia-common (11.0.0-2) OpenStack Load Balancer as a Service - Common files Other Packages Related to octavia-common: [adduser ]
add and remove users and groups
[dbconfig-common ]
framework that helps packages to manage databases
[debconf ]
Debian configuration management system
[python3-octavia ] (= 11.0.0-2)
OpenStack Load Balancer as a Service - Python libraries
[debconf ] (>= 0.5)
Debian configuration management system
Package not available
Package file paths (0) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-94571 ] Published: Aug 14, 2026, 9:17:58 PM UTC
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The RFC 3986 URL validator percent-encodes c
Critical(9.4) Affected Details (2) 11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
[CVE-2026-94572 ] Published: Aug 14, 2026, 9:17:58 PM UTC
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into the HAProxy configur
Critical(9.4) Affected Details (2) 11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
[CVE-2026-74248 ] Published: Aug 14, 2026, 8:20:31 PM UTC
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of th
Critical(9.4) Affected Details (2) 11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
11.0.0-2 · all · bookworm
Affected
nvd · octavia · debian · bookworm; nvd · octavia · debian · 12
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2019-17134 ] Published: Oct 8, 2019, 12:00:00 AM UTC
octavia: CVE-2019-17134
Medium(6.7) Fixed Details (2) 11.0.0-2 · all · bookworm
Fixed · Fixed: 4.0.0-6
dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2 · all · bookworm
Fixed · Fixed: 4.0.0-6
dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
[CVE-2019-3895 ] Published: May 27, 2019, 12:00:00 AM UTC
octavia: CVE-2019-3895
Medium(5.5) Not affected Details (2) 11.0.0-2 · all · bookworm
Not affected
dsa · octavia · debian · bookworm
11.0.0-2 · all · bookworm
Not affected
dsa · octavia · debian · bookworm
[CVE-2018-16856 ] Published: Sep 26, 2018, 12:00:00 AM UTC
octavia: CVE-2018-16856
Medium(5.5) Not affected Details (2) 11.0.0-2 · all · bookworm
Not affected
dsa · octavia · debian · bookworm
11.0.0-2 · all · bookworm
Not affected
dsa · octavia · debian · bookworm
Last synced: Oct 28, 2026, 3:52:27 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
11.0.0-2 / all Observed Sep 1, 2026 sha256 df4704d1a8f4…31e550ccSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): df4704d1a8f4d5f0e519ece3cfcdc06e760485a4c44d9040e93740a531e550cc
Verify download
printf '%s %s\n' 'df4704d1a8f4d5f0e519ece3cfcdc06e760485a4c44d9040e93740a531e550cc' 'octavia-common_11.0.0-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
11.0.0-2 / all Observed Sep 1, 2026 sha256 df4704d1a8f4…31e550ccSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): df4704d1a8f4d5f0e519ece3cfcdc06e760485a4c44d9040e93740a531e550cc
Verify download
printf '%s %s\n' 'df4704d1a8f4d5f0e519ece3cfcdc06e760485a4c44d9040e93740a531e550cc' 'octavia-common_11.0.0-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
