Summary
Dan Smith, Julia Kreger and Jay Faulkner discovered that in
image processing for Ironic, a specially crafted image
could be used by an authenticated user to exploit undesired behaviors
in qemu-img, including possible unauthorized access to potentially
sensitive data.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | ironic | 1:20.1.0-0ubuntu1.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | ironic | 1:24.1.1-0ubuntu1.2 |
Vulnerabilities 1
-
Medium 4.3
In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, …
References
-
report
https://ubuntu.com/security/CVE-2024-44082