Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 24.04 LTS: USN-6912-1 Severe GlusterFS Security Vulnerability

ubuntu
Calendar Grey July 23, 2024
Dist Ubuntu Esm H88
A vulnerability in Nova has been discovered that permits unauthorized file access on Ubuntu systems. Users are urged to apply updates for impacted versions to mitigate potential risks.
Nova would allow unintended access to files over the network.

Summary

Nova would allow unintended access to files over the network.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

Arnaud Morin discovered that Nova incorrectly handled certain raw format

images. An authenticated user could use this issue to access arbitrary

files on the server, possibly exposing sensitive information.

Topics%20covered

Topics Covered

security advisory critical issue file access ubuntu network access nova

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   nova-common                     3:29.0.1-0ubuntu1.4
   python3-nova                    3:29.0.1-0ubuntu1.4

Ubuntu 22.04 LTS
   nova-common                     3:25.2.1-0ubuntu2.6
   python3-nova                    3:25.2.1-0ubuntu2.6

Ubuntu 20.04 LTS
   nova-common                     2:21.2.4-0ubuntu2.11
   python3-nova                    2:21.2.4-0ubuntu2.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6911-1

CVE-2024-40767

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6911-1

Topics%20covered

Topics Covered

security advisory critical issue file access ubuntu network access nova

Package Information

https://launchpad.net/ubuntu/+source/nova/3:29.0.1-0ubuntu1.4
https://launchpad.net/ubuntu/+source/nova/3:25.2.1-0ubuntu2.6
https://launchpad.net/ubuntu/+source/nova/2:21.2.4-0ubuntu2.11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here