--===============2605124455448729482==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature";
 boundary="=-UmxwanQcf2/6nZ061Oho"


--=-UmxwanQcf2/6nZ061Oho
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1305-1
December 13, 2011

nova vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10

Summary:

Nova could be made to overwrite files.

Software Description:
- nova: OpenStack Compute cloud infrastructure

Details:

David Black discovered that Nova did not properly perform input validation
during image registration. An attacker could exploit this by registering a
crafted image using the EC2 API or S3/RegisterImage method and overwrite
files as the nova user.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  python-nova                     2011.3-0ubuntu6.3

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1305-1
  CVE-2011-4596

Package Information:
  https://launchpad.net/ubuntu/+source/nova/2011.3-0ubuntu6.3



--ÞmxwanQcf2/6nZ061Oho
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=oTF6
-----END PGP SIGNATURE-----

--=-UmxwanQcf2/6nZ061Oho--



--===============2605124455448729482==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============2605124455448729482==--