Package "python3-glance"
| Name: |
python3-glance
|
Description: |
OpenStack Image Registry and Delivery Service - Python 3 library
|
| Latest version: |
2:20.2.0-0ubuntu1.2 |
| Release: |
focal (20.04) |
| Level: |
security |
| Repository: |
main |
| Head package: |
glance |
| Homepage: |
https://launchpad.net/glance |
Links
Download "python3-glance"
Other versions of "python3-glance" in Focal
Changelog
|
glance (2:20.2.0-0ubuntu1.2) focal-security; urgency=medium
* SECURITY UPDATE: Arbitrary file access via custom QCOW2 external data
(LP: #2059809)
- debian/patches/CVE-2024-32498-pre1.patch: stream-friendly disk format
inspection module.
- debian/patches/CVE-2024-32498-pre2.patch: fix unintentional exception
inspecting VMDK.
- debian/patches/CVE-2024-32498-pre3.patch: limit CaptureRegion sizes
in format_inspector for VMDK and VHDX.
- debian/patches/CVE-2024-32498-pre4.patch: support Stream Optimized
VMDKs.
- debian/patches/CVE-2024-32498-pre5.patch: add missing fail case tests
for image_conversion.
- debian/patches/CVE-2024-32498-pre6.patch: make action wrapper support
arbitrary properties.
- debian/patches/CVE-2024-32498-pre7.patch: make image_conversion use
action wrapper.
- debian/patches/CVE-2024-32498-pre8.patch: update image.size after
conversion.
- debian/patches/CVE-2024-32498-1.patch: reject qcow files with
data-file attributes.
- debian/patches/CVE-2024-32498-2.patch: extend format_inspector for
QCOW safety.
- debian/patches/CVE-2024-32498-3.patch: add VMDK safety check.
- debian/patches/CVE-2024-32498-4.patch: reject unsafe qcow and vmdk
files.
- debian/patches/CVE-2024-32498-5.patch: add QED format detection to
format_inspector.
- debian/patches/CVE-2024-32498-6.patch: add file format detection to
format_inspector.
- debian/patches/CVE-2024-32498-7.patch: add safety check and detection
support to FI tool.
- debian/control: added qemu-utils to Build-Depends so qemu-img is
available for new tests.
- CVE-2024-32498
-- Marc Deslauriers <email address hidden> Wed, 03 Jul 2024 14:14:53 -0400
|
| Source diff to previous version |
| CVE-2024-32498 |
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom |
|
|
glance (2:20.2.0-0ubuntu1.1) focal-security; urgency=medium
* SECURITY UPDATE: Arbitrary file access
- debian/patches/CVE-2022-47951.patch: Enforce image safety
during image_conversion.
- CVE-2022-47951
-- Corey Bryant <email address hidden> Sun, 29 Jan 2023 10:53:07 -0500
|
| CVE-2022-47951 |
An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and |
|
About
-
Send Feedback to @ubuntu_updates
