Ubuntu 24.04 LTS Advisory USN-6883-1: Glance File Access Risk

ubuntu

July 8, 2024

OpenStack Glance would allow unintended access to files over the network.

Summary

OpenStack Glance would allow unintended access to files over the network.

Software Description:

- glance: OpenStack Image Registry and Delivery Service

Details:

Martin Kaesberger discovered that Glance incorrectly handled QCOW2 image

processing. An authenticated user could use this issue to access arbitrary

files on the server, possibly exposing sensitive information.

Topics Covered

security advisory file access ubuntu network issue glance

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   glance-common                   2:28.0.1-0ubuntu1.2

Ubuntu 23.10
   glance-common                   2:27.0.0-0ubuntu1.2

Ubuntu 22.04 LTS
   glance-common                   2:24.2.1-0ubuntu1.2

Ubuntu 20.04 LTS
   glance-common                   2:20.2.0-0ubuntu1.2

In general, a standard system update will make all the necessary changes.