| |||||||||||||||||||
Ubuntu alert USN-1497-1 (nova)
========================================================================== Ubuntu Security Notice USN-1497-1 July 03, 2012 nova vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 Summary: Nova could be made to overwrite or corrupt arbitrary files in the compute host file system. Software Description: - nova: OpenStack Compute cloud infrastructure Details: Matthias Weckbecker discovered that, when using the OpenStack API to setup libvirt-based hypervisors, an authenticated user could inject files in arbitrary locations on the file system of the host running Nova. A remote attacker could use this to gain root privileges. This issue only affects Ubuntu 12.04 LTS. (CVE-2012-3360) Pádraig Brady discovered that an authenticated user could corrupt arbitrary files of the host running Nova. A remote attacker could use this to cause a denial of service or possibly gain privileges. (CVE-2012-3361) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: python-nova 2012.1+stable~20120612-3ee026e-0ubuntu1.1 Ubuntu 11.10: python-nova 2011.3-0ubuntu6.9 In general, a standard system update will make all the necessary changes. References: http://www.ubuntu.com/usn/usn-1497-1 CVE-2012-3360, CVE-2012-3361 Package Information: https://launchpad.net/ubuntu/+source/nova/2012.1+stable~2... https://launchpad.net/ubuntu/+source/nova/2011.3-0ubuntu6.9 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security... (Log in to post comments)
|
|||||||||||||||||||