p PatchFirst

USN-8111-1

USN-8111-1 · glance vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images from a remote source. An attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • glance Ubuntu:22.04:LTS

    Versions
    • 2:23.0.0-0ubuntu1
    • 2:23.0.0+git2021120811.4ee7799aa-0ubuntu1
    • 2:23.0.0+git2022011216.502fa0ffc-0ubuntu1
    • 2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1
    • 2:24.0.0-0ubuntu1
    • 2:24.1.0-0ubuntu1
    • 2:24.1.0-0ubuntu1.1
    • 2:24.2.0-0ubuntu1
    • 2:24.2.1-0ubuntu1
    • 2:24.2.1-0ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 2:24.2.1-0ubuntu1.4

    Update to 2:24.2.1-0ubuntu1.4

  • glance Ubuntu:24.04:LTS

    Versions
    • 2:27.0.0-0ubuntu1
    • 2:28.0.0~b2+git2024011916.f429b53e-0ubuntu1
    • 2:28.0.0~rc1-0ubuntu1
    • 2:28.0.1-0ubuntu1
    • 2:28.0.1-0ubuntu1.2
    • 2:28.1.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2:28.1.0-0ubuntu1.2

    Update to 2:28.1.0-0ubuntu1.2

  • glance Ubuntu:25.10

    Versions
    • 2:30.0.0-0ubuntu1
    • 2:30.0.0+git2025070714.9b2cd1634-0ubuntu1
    • 2:31.0.0~rc1-0ubuntu1
    • 2:31.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2:31.0.0-0ubuntu1.2

    Update to 2:31.0.0-0ubuntu1.2

Original sources

Check your server →