Headline
Ubuntu Security Notice USN-6668-1
Ubuntu Security Notice 6668-1 - It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations.
==========================================================================Ubuntu Security Notice USN-6668-1February 28, 2024python-openstackclient vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 22.04 LTS- Ubuntu 20.04 LTSSummary:python-openstackclient could delete incorrect access rules.Software Description:- python-openstackclient: OpenStack Command-line ClientDetails:It was discovered that when python-openstackclient attempted to delete anon-existing access rule, it would delete another existing access ruleinstead, contrary to expectations.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 22.04 LTS: python3-openstackclient 5.8.0-0ubuntu1.1Ubuntu 20.04 LTS: python3-openstackclient 5.2.0-0ubuntu1.20.04.2In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6668-1 CVE-2023-6110Package Information: https://launchpad.net/ubuntu/+source/python-openstackclient/5.8.0-0ubuntu1.1 https://launchpad.net/ubuntu/+source/python-openstackclient/5.2.0-0ubuntu1.20.04.2Related news
GHSA-2ppf-2m6f-6v6f: OpenStack improperly deletes access rules
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.