USN-6073-1: Cinder vulnerability
Jan Wasilewski and Gorka Eguileor discovered that Cinder incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes to be completely effective, please see the upstream advisory for more information: https://security.openstack.org/ossa/OSSA-2023-003.html
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this security notice?
The vulnerability ID for this security notice is USN-6073-1.
Who discovered the vulnerability?
Jan Wasilewski and Gorka Eguileor discovered the vulnerability.
What is the impact of this vulnerability?
An authenticated user or attacker could gain access to sensitive information.
How can I fix this vulnerability?
To fix this vulnerability, update the python3-cinder package to version 2:22.0.0-0ubuntu1.1 or later.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu security website.