UbuntuUpdates.org

Package "nova"

Name: nova

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • OpenStack Compute - API frontend
  • OpenStack Compute - common files
  • OpenStack Compute - compute node base
  • OpenStack Compute - compute node (KVM)

Latest version: 2:21.2.4-0ubuntu2.6
Release: focal (20.04)
Level: updates
Repository: main

Links



Other versions of "nova" in Focal

Repository Area Version
base main 2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2
base universe 2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2
security main 2:21.2.4-0ubuntu2.5
security universe 2:21.2.4-0ubuntu2.5
updates universe 2:21.2.4-0ubuntu2.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:21.2.4-0ubuntu2.6 2023-09-20 09:08:23 UTC

  nova (2:21.2.4-0ubuntu2.6) focal; urgency=medium

  * d/p/lp1960758-ubuntu-uefi-loader-path.patch: add config option
    'ubuntu_libvirt_uefi_loader_path' to restrict UEFI loaders to
    only those shipped/supported in Ubuntu/Ussuri. (LP: #1960758)

 -- Mauricio Faria de Oliveira <email address hidden> Tue, 25 Jul 2023 17:34:00 -0300

Source diff to previous version
1960758 UEFI libvirt servers can't boot on Ubuntu 20.04 hypervisors with Ussuri/Victoria

Version: 2:21.2.4-0ubuntu2.5 2023-05-23 15:07:16 UTC

  nova (2:21.2.4-0ubuntu2.5) focal-security; urgency=medium

  * SECURITY REGRESSION: Regressions in other projects (LP: #2020111)
    - debian/patches/series: Do not apply CVE-2023-2088.patch until
      patches are ready for all upstream OpenStack projects.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Thu, 18 May 2023 10:52:04 -0400

Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 2:21.2.4-0ubuntu2.4 2023-05-14 19:07:10 UTC

  nova (2:21.2.4-0ubuntu2.4) focal-security; urgency=medium

  * SECURITY REGRESSION: Regression with volume drivers (LP: #2019460)
    - debian/patches/CVE-2023-2088.patch: Updated to add missing force
      parameter to various volume drivers.

 -- Corey Bryant <email address hidden> Sat, 13 May 2023 09:56:20 -0400

Source diff to previous version
2019460 nova-compute 23.2.2-0ubuntu1~cloud2 unable to detach volumes
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 2:21.2.4-0ubuntu2.3 2023-05-11 20:07:13 UTC

  nova (2:21.2.4-0ubuntu2.3) focal-security; urgency=medium

  * SECURITY UPDATE: Unauthorized File Access
    - debian/patches/CVE-2023-2088.patch: Use force=True for os-brick
      disconnect during delete.
    - CVE-2023-2088

 -- Corey Bryant <email address hidden> Tue, 09 May 2023 16:59:35 -0400

Source diff to previous version
CVE-2023-2088 OSSA-2023-003: Unauthorized volume access through deleted volume attachments

Version: 2:21.2.4-0ubuntu2.2 2023-02-13 14:07:09 UTC

  nova (2:21.2.4-0ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS vulnerability
    - debian/patches/CVE-2022-37394.patch: Gracefully ERROR in
      _init_instance if vnic_type changed
    - CVE-2022-37394

 -- Nishit Majithia <email address hidden> Wed, 08 Feb 2023 14:05:40 +0530

CVE-2022-37394 An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_



About   -   Send Feedback to @ubuntu_updates