1. Ubuntu Security Notices
  2. USN-3666-1

USN-3666-1: Oslo middleware vulnerability

Publication date

31 May 2018

Overview

Applications using Oslo middleware could be made to expose sensitive information.

Releases

Packages

Details

Divya K Konoor discovered Oslo middleware was vulnerable to an information
disclosure. A local attacker could exploit this flaw to obtain sensitive
information from OpenStack component error logs.

Divya K Konoor discovered Oslo middleware was vulnerable to an information
disclosure. A local attacker could exploit this flaw to obtain sensitive
information from OpenStack component error logs.

Update instructions

After a standard system update you need to restart OpenStack services to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
16.04 xenial python-oslo.middleware –  3.8.0-2ubuntu1
python-oslo.middleware-doc –  3.8.0-2ubuntu1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›