Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 18.04 LTS: USN-5835-5 Moderate Nova Information Exposure

ubuntu
Calendar Grey February 9, 2023
Dist Ubuntu Esm H88
Latest news regarding the Nova flaw in Ubuntu 18.04 LTS impacting confidential data. It's crucial to apply necessary system patches to maintain security.
Nova could be made to expose sensitive information.

Summary

Nova could be made to expose sensitive information.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

USN-5835-3 fixed vulnerabilities in Nova. This update provides the

corresponding updates for Ubuntu 18.04 LTS.

Original advisory details:

Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou

discovered that Nova incorrectly handled VMDK image processing. An

authenticated attacker could possibly supply a specially crafted VMDK flat

image and obtain arbitrary files from the server containing sensitive

information.

Topics%20covered

Topics Covered

security advisory software update information exposure ubuntu nova

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
   nova-common                     2:17.0.13-0ubuntu5.2
   python-nova                     2:17.0.13-0ubuntu5.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5835-5

https://ubuntu.com/security/notices/USN-5835-1

CVE-2022-47951

February 09, 2023

Topics%20covered

Topics Covered

security advisory software update information exposure ubuntu nova

Package Information

https://launchpad.net/ubuntu/+source/nova/2:17.0.13-0ubuntu5.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here