USN-3195-1: Nova-LXD vulnerability
USN-3195-1: Nova-LXD vulnerability Ubuntu Security Notice USN-3195-1 9th February, 2017 nova-lxd vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Summary Nova-LXD could allow unintended access to LXD instances over the network. Software description nova-lxd – Openstack Compute – LXD container hypervisor support Details James Page discovered that Nova-LXD incorrectly set up virtual network deviceswhen creating LXD instances. This could result in an unintended firewallconfiguration. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.04 LTS: python-nova-lxd 13.2.0-0ubuntu1.16.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes fornew instances. However, existing instances will still be affected and must bemanually updated. References CVE-2017-5936, LP: 1656847 Source: USN-3195-1: Nova-LXD vulnerability