UbuntuUpdates.org

Package "nova-api-metadata"

Name: nova-api-metadata

Description:

OpenStack Compute - metadata API frontend
Latest version: 3:33.0.0-0ubuntu3.1
Release: resolute (26.04)
Level: updates
Repository: universe
Head package: nova
Homepage: https://launchpad.net/nova

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "nova-api-metadata"

All arch deb package
APT INSTALL

Other versions of "nova-api-metadata" in Resolute

Repository Area Version
base universe 3:33.0.0-0ubuntu3
security universe 3:33.0.0-0ubuntu3.1

Changelog

Version: 3:33.0.0-0ubuntu3.1 2026-06-17 04:07:34 UTC

  nova (3:33.0.0-0ubuntu3.1) resolute-security; urgency=high

  * SECURITY UPDATE: scheduler bypass via internal _nova-prefixed hints
    - d/p/cve-2026-46448-strip-internal-nova-scheduler-hints.patch: strip
      internal _nova-prefixed scheduler hints on instance create so they
      cannot bypass Placement candidate selection, request pre-filters and
      resource claims.
    - CVE-2026-46448
  * d/gbp.conf: Create stable/2026.1 branch.

 -- Hemanth Nakkina <email address hidden> Mon, 08 Jun 2026 14:10:45 +0530
CVE-2026-46448 In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.


About   -   Send Feedback to @ubuntu_updates