Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 728
Alerts This Week
Warning Icon 1 728

Ubuntu 20.04 LTS USN-6073-5 Moderate: Nova Regression Issues Fixed

ubuntu
Calendar Grey May 14, 2023
Dist Ubuntu Esm H88
A new issue surfaced in Nova impacting Ubuntu 20.04 LTS. Please update promptly for resolutions and further information.
USN-6073-3 introduced a regression in Nova.

Summary

USN-6073-3 introduced a regression in Nova.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

USN-6073-3 fixed a vulnerability in Nova. The update introduced a

regression causing Nova to be unable to detach volumes from instances. This

update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Jan Wasilewski and Gorka Eguileor discovered that Nova incorrectly

handled deleted volume attachments. An authenticated user or attacker could

possibly use this issue to gain access to sensitive information.

This update may require configuration changes to be completely effective,

please see the upstream advisory for more information:

Topics%20covered

Topics Covered

security advisory update ubuntu sensitive information regression cloud infrastructure nova

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   python3-nova                    2:21.2.4-0ubuntu2.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6073-5

https://ubuntu.com/security/notices/USN-6073-1

https://bugs.launchpad.net/cloud-archive/+bug/2019460

May 14, 2023

Topics%20covered

Topics Covered

security advisory update ubuntu sensitive information regression cloud infrastructure nova

Package Information

https://launchpad.net/ubuntu/+source/nova/2:21.2.4-0ubuntu2.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.