Debian/glance: medium 6.5
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 i
Action: Upgrade glance to 2:28.0.1-3+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:28.0.1-3+deb12u1 | - |
Fixed versions
| 2:28.0.1-3+deb12u1 |
Sources
- osv: DEBIAN-CVE-2024-32498#Debian:13/glance
- https://security-tracker.debian.org/tracker/CVE-2024-32498
published · modified · JSON