Debian/cinder: medium 6.5
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 i
Action: Upgrade cinder to 2:21.3.1-1~deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:21.3.1-1~deb12u1 | - |
Fixed versions
| 2:21.3.1-1~deb12u1 |
Sources
published · modified · JSON