Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 520
Alerts This Week
Warning Icon 1 520

Ubuntu 16.04 LTS USN-3195-1 Moderate: nova-lxd Network Threat

ubuntu
Calendar Grey February 10, 2017
Dist Ubuntu Esm H88
Inadvertent exposure of LXD containers on Ubuntu linked to nova-lxd flaw. Immediate patching advised.
Nova-LXD could allow unintended access to LXD instances over the network.

Summary

Nova-LXD could allow unintended access to LXD instances over the network.

Software Description:

- nova-lxd: Openstack Compute - LXD container hypervisor support

Details:

James Page discovered that Nova-LXD incorrectly set up virtual network devices

when creating LXD instances. This could result in an unintended firewall

configuration.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat network access firewall issue nova-lxd LXD instances

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  python-nova-lxd                 13.2.0-0ubuntu1.16.04.1

In general, a standard system update will make all the necessary changes for
new instances. However, existing instances will still be affected and must be
manually updated.

References

https://ubuntu.com/security/notices/USN-3195-1

CVE-2017-5936, https://bugs.launchpad.net/nova-lxd/+bug/1656847

Severity
important
Lowest
Low
Medium
High
Critical

February 10, 2017

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat network access firewall issue nova-lxd LXD instances

Package Information

https://launchpad.net/ubuntu/+source/nova-lxd/13.2.0-0ubuntu1.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.