Ubuntu 6884-1 Moderate: Nova Access Issue on Networking

ubuntu

July 8, 2024

Nova would allow unintended access to files over the network.

Summary

Nova would allow unintended access to files over the network.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image

processing. An authenticated user could use this issue to access arbitrary

files on the server, possibly exposing sensitive information.

Topics Covered

security advisory network security software update access issue ubuntu sensitive information nova

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   nova-common                     3:29.0.1-0ubuntu1.3
   python3-nova                    3:29.0.1-0ubuntu1.3

Ubuntu 23.10
   nova-common                     3:28.0.1-0ubuntu1.3
   python3-nova                    3:28.0.1-0ubuntu1.3

Ubuntu 22.04 LTS
   nova-common                     3:25.2.1-0ubuntu2.3
   python3-nova                    3:25.2.1-0ubuntu2.3

Ubuntu 20.04 LTS
   nova-common                     2:21.2.4-0ubuntu2.8
   python3-nova                    2:21.2.4-0ubuntu2.8

In general, a standard system update will make all the necessary changes.