Skip to content

Commit cfd2e61

Browse files
committed
Fix formatting hints from linter.
Signed-off-by: Kurt Garloff <kurt@garloff.de>
1 parent 52b6d25 commit cfd2e61

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

blog/2026-02-17-cve-2026-24708.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,14 +30,14 @@ This vulnerability has been assigned [CVE-2026-24708](https://nvd.nist.gov/vuln/
3030
## Impact on the SCS software ecosystem
3131

3232
By default, Nova uses cow images, i.e. `use_cow_images` in `nova.conf` defaults
33-
to `True`.
33+
to `True`.
3434

3535
This value is not changed in either [OSISM](https://osism.tech/) nor
3636
[yaook](https://alasca.cloud/en/projects/yaook/), so neither of these implementations
3737
is affected by the vulnerability. Operators need to have made a deliberate effort
3838
to override this setting.
3939

40-
*If this setting is set to `False`, authenticated users may write malicious QCOW2
40+
*If this setting is set to `False`, authenticated users may write malicious QCOW2
4141
or VMDK headers to the disk and then use the VM resize to overwrite files on the host
4242
with zeros, causing failure of the compute host.*
4343

@@ -79,13 +79,14 @@ by passing `-f raw` to `qemu-img` when a resize happens with raw images and
7979

8080
The SCS ecosystem software providers will provide fixed nova-compute images and
8181
installation instructions here as soon as the updated images are available:
82+
8283
* [yaook](https://yaook.cloud/security-advisories-cve-2026-24708)
8384
* [OSISM](https://osism.tech/docs/appendix/security/ossa-2026-002)
8485

8586
## Thanks
8687

8788
The author would like to thank Dan Smith, Jay Faulkner, Sylvain Bauza,
88-
Melanie Witt, and Jeremy Stanley for reporting, reproducing, fixing
89+
Melanie Witt, and Jeremy Stanley for reporting, reproducing, fixing
8990
and coordinating this issue.
9091

9192
<!-- BROKEN

0 commit comments

Comments
 (0)