tocsin

Debian/nova: medium 6.5

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 i

Action: Upgrade nova to 2:26.2.2-1~deb12u3 or later.

Affected

introducedfixedlast affected
02:26.2.2-1~deb12u3-

Fixed versions

2:26.2.2-1~deb12u3

Sources

published · modified · JSON