A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-ajax-console-proxy" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-api" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-api-metadata" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-api-os-compute" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-api-os-volume" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-cells" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-cert" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-common" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-kvm" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-libvirt" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-lxc" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-qemu" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-vmware" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-compute-xen" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-conductor" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-console" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-consoleauth" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-doc" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-network" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-novncproxy" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-scheduler" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-serialproxy" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-spiceproxy" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-volume" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "nova-xvpvncproxy" }, { "binary_version": "2:13.1.4-0ubuntu4.5+esm1", "binary_name": "python-nova" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-ajax-console-proxy" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-api" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-api-metadata" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-api-os-compute" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-api-os-volume" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-cells" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-common" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-kvm" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-libvirt" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-lxc" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-qemu" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-vmware" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-compute-xen" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-conductor" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-console" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-consoleauth" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-doc" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-network" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-novncproxy" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-placement-api" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-scheduler" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-serialproxy" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-spiceproxy" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-volume" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "nova-xvpvncproxy" }, { "binary_version": "2:17.0.13-0ubuntu5.3", "binary_name": "python-nova" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-ajax-console-proxy" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-api" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-api-metadata" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-api-os-compute" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-api-os-volume" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-cells" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-common" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-kvm" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-libvirt" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-lxc" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-qemu" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-vmware" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-compute-xen" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-conductor" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-doc" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-novncproxy" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-scheduler" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-serialproxy" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-spiceproxy" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "nova-volume" }, { "binary_version": "2:21.2.4-0ubuntu2.1", "binary_name": "python3-nova" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-ajax-console-proxy" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-api" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-api-metadata" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-api-os-compute" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-api-os-volume" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-cells" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-common" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-ironic" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-kvm" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-libvirt" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-lxc" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-qemu" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-vmware" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-compute-xen" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-conductor" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-doc" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-novncproxy" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-scheduler" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-serialproxy" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-spiceproxy" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "nova-volume" }, { "binary_version": "3:25.0.0-0ubuntu1", "binary_name": "python3-nova" } ] }