Ubuntu 6884-1 Moderate: Nova Access Issue on Networking
ubuntu
July 8, 2024
Nova would allow unintended access to files over the network.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Nova would allow unintended access to files over the network. Software Description: - nova: OpenStack Compute cloud infrastructure Details: Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS nova-common 3:29.0.1-0ubuntu1.3 python3-nova 3:29.0.1-0ubuntu1.3 Ubuntu 23.10 nova-common 3:28.0.1-0ubuntu1.3 python3-nova 3:28.0.1-0ubuntu1.3 Ubuntu 22.04 LTS nova-common 3:25.2.1-0ubuntu2.3 python3-nova 3:25.2.1-0ubuntu2.3 Ubuntu 20.04 LTS nova-common 2:21.2.4-0ubuntu2.8 python3-nova 2:21.2.4-0ubuntu2.8 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-6884-1
CVE-2024-32498
PREVIOUS
NEXT
Ubuntu Security Notice USN-6884-1
Package Information
https://launchpad.net/ubuntu/+source/nova/3:29.0.1-0ubuntu1.3 https://launchpad.net/ubuntu/+source/nova/3:28.0.1-0ubuntu1.3 https://launchpad.net/ubuntu/+source/nova/3:25.2.1-0ubuntu2.3 https://launchpad.net/ubuntu/+source/nova/2:21.2.4-0ubuntu2.8
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!