The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3872 advisory. – ————————————————————————- Debian LTS Advisory DLA-3872-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Thomas Goirand September 05, 2024 https://wiki.debian.org/LTS – ————————————————————————- Package : glance Version : 2:21.1.0-1+deb11u2 CVE ID : CVE-2024-32498 Debian Bug : 1074761 Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in the disclosure of arbitrary files. For Debian 11 bullseye, this problem has been fixed in version 2:21.1.0-1+deb11u2. We recommend that you upgrade your glance packages. For the detailed security status of glance please refer to its security tracker page at: https://security-tracker.debian.org/tracker/glance Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Tenable has extracted the preceding description block directly from the Debian security advisory. Note that Nessus has not tested for this issue but has instead relied only on the…Read More