USN-6989-1: OpenStack vulnerability

Releases

• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS

Packages

• ironic - Openstack bare metal provisioning service - API

Details

Dan Smith, Julia Kreger and Jay Faulkner discovered that in
image processing for Ironic, a specially crafted image
could be used by an authenticated user to exploit undesired behaviors
in qemu-img, including possible unauthorized access to potentially
sensitive data.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• python3-ironic - 1:24.1.1-0ubuntu1.2

Ubuntu 22.04

• python3-ironic - 1:20.1.0-0ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

• CVE-2024-44082