Ubuntu 22.04 LTS: USN-5697-1 High: Barbican Data Exposure Risk

ubuntu

October 25, 2022

Barbican could be made to expose sensitive information over the network.

Summary

Barbican could be made to expose sensitive information over the

network.

Software Description:

- barbican: OpenStack Key Management Service - API Server

Details:

Douglas Mendizabal discovered that Barbican incorrectly handled certain

query strings. A remote attacker could possibly use this issue to bypass

the access policy.

Topics Covered

security advisory high severity update instructions ubuntu data exposure access bypass barbican

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
   python3-barbican                2:14.0.0-0ubuntu1.1

Ubuntu 20.04 LTS:
   python3-barbican                1:10.1.0-0ubuntu2.2

Ubuntu 18.04 LTS:
   python-barbican                 1:6.0.1-0ubuntu1.2

In general, a standard system update will make all the necessary changes.