Ubuntu 24.04 LTS: USN-6882-1 Critical: Cinder File Access Issue
ubuntu
July 8, 2024
Cinder would allow unintended access to files over the network.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Cinder would allow unintended access to files over the network. Software Description: - cinder: OpenStack storage service Details: Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-cinder 2:24.0.0-0ubuntu1.2 Ubuntu 23.10 python3-cinder 2:23.0.0-0ubuntu1.4 Ubuntu 22.04 LTS python3-cinder 2:20.3.1-0ubuntu1.4 Ubuntu 20.04 LTS python3-cinder 2:16.4.2-0ubuntu2.8 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-6882-1
CVE-2024-32498
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-6882-1
Topics Covered
Package Information
https://launchpad.net/ubuntu/+source/cinder/2:24.0.0-0ubuntu1.2 https://launchpad.net/ubuntu/+source/cinder/2:23.0.0-0ubuntu1.4 https://launchpad.net/ubuntu/+source/cinder/2:20.3.1-0ubuntu1.4 https://launchpad.net/ubuntu/+source/cinder/2:16.4.2-0ubuntu2.8
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!