Stay Secure with the Latest Linux Advisories

security advisorysecurity issueaccess control

Ubuntu 11.10: USN-1326-1 Moderate: Nova Remote Access Issue

Nova would allow unintended access to resources over the network.. =========================================================================Ubuntu Security Notice USN-1326-1 January 11, 2012 nova vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 Summary: Nova would allow unintended access to resources over the network. Software Description: - nova: OpenStack Compute cloud infrastructure Details: Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that when Nova is configured to use the OpenStack API, it would not correctly enforce access controls on certain incoming requests. A remote authenticated attacker could exploit this to change resources of arbitrary tenants. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: nova-api 2011.3-0ubuntu6.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1326-1 CVE-2012-0030 Package Information: https://launchpad.net/ubuntu/+source/nova/2011.3-0ubuntu6.4 . Debian Security Advisory DSA-1234-1 highlights a kernel flaw that may grant unauthorized control over system processes.. Nova Vulnerability, Cloud Security Advisory, Ubuntu Update Instructions. . LinuxSecurity.com Team

Jan 11, 2012 Ubuntu