========================================================================== Ubuntu Security Notice USN-5835-3 January 31, 2023
nova vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Nova could be made to expose sensitive information. Software Description: - nova: OpenStack Compute cloud infrastructure Details: Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Nova incorrectly handled VMDK image processing. An authenticated attacker could possibly supply a specially crafted VMDK flat image and obtain arbitrary files from the server containing sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: nova-common 3:26.1.0-0ubuntu1 python3-nova 3:26.1.0-0ubuntu1 Ubuntu 22.04 LTS: nova-common 3:25.1.0-0ubuntu1 python3-nova 3:25.1.0-0ubuntu1 Ubuntu 20.04 LTS: nova-common 2:21.2.4-0ubuntu2.1 python3-nova 2:21.2.4-0ubuntu2.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5835-3 https://ubuntu.com/security/notices/USN-5835-1 CVE-2022-47951 Package Information: https://launchpad.net/ubuntu/+source/nova/3:26.1.0-0ubuntu1 https://launchpad.net/ubuntu/+source/nova/3:25.1.0-0ubuntu1 https://launchpad.net/ubuntu/+source/nova/2:21.2.4-0ubuntu2.1
OpenPGP_signature
Description: OpenPGP digital signature
