UbuntuUpdates.org

Package "nova-api-metadata"

Name: nova-api-metadata

Description:

OpenStack Compute - metadata API frontend

Latest version: 2:21.2.4-0ubuntu2.11
Release: focal (20.04)
Level: security
Repository: universe
Head package: nova
Homepage: https://launchpad.net/nova

Links


Download "nova-api-metadata"


Other versions of "nova-api-metadata" in Focal

Repository Area Version
base universe 2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2
updates universe 2:21.2.4-0ubuntu2.13
proposed universe 2:21.2.4-0ubuntu2.14

Changelog

Version: 2:21.2.4-0ubuntu2.2 2023-02-13 12:07:04 UTC

  nova (2:21.2.4-0ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS vulnerability
    - debian/patches/CVE-2022-37394.patch: Gracefully ERROR in
      _init_instance if vnic_type changed
    - CVE-2022-37394

 -- Nishit Majithia <email address hidden> Wed, 08 Feb 2023 14:05:40 +0530

Source diff to previous version
CVE-2022-37394 An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_

Version: 2:21.2.4-0ubuntu2.1 2023-01-31 15:07:14 UTC

  nova (2:21.2.4-0ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access
    - debian/patches/CVE-2022-47951.patch: Check VMDK create-type
      against an allowed list.
    - CVE-2022-47951

 -- Corey Bryant <email address hidden> Sun, 29 Jan 2023 11:35:32 -0500

CVE-2022-47951 An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and



About   -   Send Feedback to @ubuntu_updates