Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-api", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-api-metadata", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-api-os-compute", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-api-os-volume", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-cells", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-common", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-kvm", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-libvirt", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-lxc", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-qemu", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-vmware", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-compute-xen", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-conductor", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-doc", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-novncproxy", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-scheduler", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-serialproxy", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-spiceproxy", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "nova-volume", "binary_version": "2:21.2.4-0ubuntu2.8" }, { "binary_name": "python3-nova", "binary_version": "2:21.2.4-0ubuntu2.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-api", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-api-metadata", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-api-os-compute", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-api-os-volume", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-cells", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-common", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-ironic", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-kvm", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-libvirt", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-lxc", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-qemu", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-vmware", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-compute-xen", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-conductor", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-doc", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-novncproxy", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-scheduler", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-serialproxy", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-spiceproxy", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "nova-volume", "binary_version": "3:25.2.1-0ubuntu2.3" }, { "binary_name": "python3-nova", "binary_version": "3:25.2.1-0ubuntu2.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-api", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-api-metadata", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-api-os-compute", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-api-os-volume", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-cells", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-common", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-ironic", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-kvm", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-libvirt", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-lxc", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-qemu", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-vmware", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-compute-xen", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-conductor", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-doc", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-novncproxy", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-scheduler", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-serialproxy", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-spiceproxy", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "nova-volume", "binary_version": "3:29.0.1-0ubuntu1.3" }, { "binary_name": "python3-nova", "binary_version": "3:29.0.1-0ubuntu1.3" } ] }