USN-6073-4: os-brick vulnerability
Jan Wasilewski and Gorka Eguileor discovered that os-brick incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes to be completely effective, please see the upstream advisory for more information: https://security.openstack.org/ossa/OSSA-2023-003.html
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this os-brick vulnerability?
The vulnerability ID for this os-brick vulnerability is USN-6073-4.
What is the impact of the os-brick vulnerability?
The os-brick vulnerability could allow an authenticated user or attacker to gain access to sensitive information.
How can an attacker exploit this os-brick vulnerability?
An attacker can exploit this os-brick vulnerability by exploiting the incorrectly handled deleted volume attachments.
Which versions of Ubuntu are affected by this os-brick vulnerability?
The versions of Ubuntu affected by this os-brick vulnerability are 23.04, 22.10, and 22.04.
How can I fix this os-brick vulnerability?
To fix this os-brick vulnerability, update the python3-os-brick package to version 6.2.0-0ubuntu2.1, 6.1.0-0ubuntu1.1, 5.2.2-0ubuntu1, or 3.0.8-0ubuntu1.1 depending on the Ubuntu version you are running.