@@ -30,14 +30,14 @@ This vulnerability has been assigned [CVE-2026-24708](https://nvd.nist.gov/vuln/
3030## Impact on the SCS software ecosystem
3131
3232By default, Nova uses cow images, i.e. ` use_cow_images ` in ` nova.conf ` defaults
33- to ` True ` .
33+ to ` True ` .
3434
3535This value is not changed in either [ OSISM] ( https://osism.tech/ ) nor
3636[ yaook] ( https://alasca.cloud/en/projects/yaook/ ) , so neither of these implementations
3737is affected by the vulnerability. Operators need to have made a deliberate effort
3838to override this setting.
3939
40- * If this setting is set to ` False ` , authenticated users may write malicious QCOW2
40+ * If this setting is set to ` False ` , authenticated users may write malicious QCOW2
4141or VMDK headers to the disk and then use the VM resize to overwrite files on the host
4242with zeros, causing failure of the compute host.*
4343
@@ -79,13 +79,14 @@ by passing `-f raw` to `qemu-img` when a resize happens with raw images and
7979
8080The SCS ecosystem software providers will provide fixed nova-compute images and
8181installation instructions here as soon as the updated images are available:
82+
8283* [ yaook] ( https://yaook.cloud/security-advisories-cve-2026-24708 )
8384* [ OSISM] ( https://osism.tech/docs/appendix/security/ossa-2026-002 )
8485
8586## Thanks
8687
8788The author would like to thank Dan Smith, Jay Faulkner, Sylvain Bauza,
88- Melanie Witt, and Jeremy Stanley for reporting, reproducing, fixing
89+ Melanie Witt, and Jeremy Stanley for reporting, reproducing, fixing
8990and coordinating this issue.
9091
9192<!-- BROKEN
0 commit comments