- Vulnerability/
- USN-6073-3
USN-6073-3: Nova vulnerability
First published: Thu May 11 2023(Updated: )
Jan Wasilewski and Gorka Eguileor discovered that Nova incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes to be completely effective, please see the upstream advisory for more information: https://security.openstack.org/ossa/OSSA-2023-003.html
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/python3-nova | <3:27.0.0-0ubuntu1.1 | 3:27.0.0-0ubuntu1.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/python3-nova | <3:26.1.0-0ubuntu2.1 | 3:26.1.0-0ubuntu2.1 |
| Ubuntu Ubuntu | =22.10 | |
| All of | ||
| ubuntu/python3-nova | <3:25.1.0-0ubuntu2.1 | 3:25.1.0-0ubuntu2.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/python3-nova | <2:21.2.4-0ubuntu2.3 | 2:21.2.4-0ubuntu2.3 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-2088
- https://ubuntu.com/security/notices/USN-6073-1
- https://ubuntu.com/security/notices/USN-6073-2
- https://ubuntu.com/security/notices/USN-6073-4
- https://ubuntu.com/security/notices/USN-6241-1
- https://launchpad.net/ubuntu/+source/nova/3:27.0.0-0ubuntu1.1
- https://launchpad.net/ubuntu/+source/nova/3:26.1.0-0ubuntu2.1
- https://launchpad.net/ubuntu/+source/nova/3:25.1.0-0ubuntu2.1
- https://launchpad.net/ubuntu/+source/nova/2:21.2.4-0ubuntu2.3
- https://ubuntu.com/security/notices/USN-6073-3 (Advisory)
Frequently Asked Questions
What is the severity of USN-6073-3?
The severity of USN-6073-3 is high.
How does the Nova vulnerability impact users?
The Nova vulnerability could allow an authenticated user or attacker to gain access to sensitive information.
Which versions of Ubuntu are affected by USN-6073-3?
Versions 23.04, 22.10, 22.04, and 20.04 of Ubuntu are affected by USN-6073-3.
What is the remedy for USN-6073-3?
The remedy for USN-6073-3 is to upgrade python3-nova to version 3:27.0.0-0ubuntu1.1, 3:26.1.0-0ubuntu2.1, 3:25.1.0-0ubuntu2.1, or 2:21.2.4-0ubuntu2.3 depending on the Ubuntu version.
Where can I find more information about USN-6073-3?
You can find more information about USN-6073-3 on the Ubuntu security website.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-6073-1
- anchor-related/USN-6073-2
- anchor-related/USN-6073-4
- anchor-related/USN-6241-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/23.04
- version/ubuntu ubuntu/22.10
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04