Ubuntu 6882-1: Cinder Security Advisory Updates
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Cinder would allow unintended access to files over the network. Software Description: - cinder: OpenStack storage service Details: Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-cinder 2:24.0.0-0ubuntu1.2 Ubuntu 23.10 python3-cinder 2:23.0.0-0ubuntu1.4 Ubuntu 22.04 LTS python3-cinder 2:20.3.1-0ubuntu1.4 Ubuntu 20.04 LTS python3-cinder 2:16.4.2-0ubuntu2.8 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-6882-1
CVE-2024-32498
Package Information
https://launchpad.net/ubuntu/+source/cinder/2:24.0.0-0ubuntu1.2 https://launchpad.net/ubuntu/+source/cinder/2:23.0.0-0ubuntu1.4 https://launchpad.net/ubuntu/+source/cinder/2:20.3.1-0ubuntu1.4 https://launchpad.net/ubuntu/+source/cinder/2:16.4.2-0ubuntu2.8