[ubuntu/jammy-security] nova 3:25.2.1-0ubuntu2.3 (Accepted)

[Marc Deslauriers]

nova (3:25.2.1-0ubuntu2.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file access via custom QCOW2 external data
    (LP: #2059809)
    - debian/patches/CVE-2024-32498-pre1.patch: consolidate
      create_cow_image and create_image.
    - debian/patches/CVE-2024-32498-1.patch: reject qcow files with
      data-file attributes.
    - debian/patches/CVE-2024-32498-2.patch: check images with
      format_inspector for safety.
    - debian/patches/CVE-2024-32498-3.patch: additional qemu safety
      checking on base images.
    - debian/patches/CVE-2024-32498-4.patch: fix vmdk_allowed_types
      checking.
    - CVE-2024-32498

nova (3:25.2.1-0ubuntu2) jammy; urgency=medium

  * d/p/libvirt-remove-default-cputune-shares-value.patch:
    Enable launch of instances with more than 9 CPUs on Jammy
    (LP: #1978489).

nova (3:25.2.1-0ubuntu1) jammy; urgency=medium

  * New stable point release for OpenStack Yoga (LP: #2037332).

nova (3:25.2.0-0ubuntu1) jammy; urgency=medium

  * New stable point release for OpenStack Yoga (LP: #2025503).
  * d/p/CVE-2023-2088-*.patch: Dropped. Fixed in point release.

Date: 2024-07-01 18:49:15.996391+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/nova/3:25.2.1-0ubuntu2.3
-------------- next part --------------
Sorry, changesfile not available.