USN-5387-1: Barbican vulnerabilities

Releases

• Ubuntu 21.10
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• barbican - OpenStack Key Management Service - API Server

Details

Douglas Mendizábal discovered that Barbican incorrectly handled access
restrictions. An authenticated attacker could possibly use this issue to
consume protected resources and possibly cause a denial of service.
(CVE-2022-23451, CVE-2022-23452)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.10

• python3-barbican - 2:13.0.0-0ubuntu1.2

Ubuntu 20.04

• python3-barbican - 1:10.1.0-0ubuntu2.1

Ubuntu 18.04

• python-barbican - 1:6.0.1-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2022-23452
• CVE-2022-23451