Описание
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nova | fixed | 2:33.0.1-4 | package | |
| nova | no-dsa | trixie | package | |
| nova | postponed | bookworm | package | |
| nova | postponed | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/06/16/5
https://launchpad.net/bugs/2151252
Связанные уязвимости
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints