Stay Secure with the Latest Linux Advisories

security advisorymoderateinformation exposure

Ubuntu 14.04 LTS USN-2311-2 Moderate: Ceilometer Info Exposure

OpenStack Ceilometer could be made to expose sensitive information.. =========================================================================Ubuntu Security Notice USN-2311-2 August 21, 2014 ceilometer vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: OpenStack Ceilometer could be made to expose sensitive information. Software Description: - ceilometer: OpenStack Telemetry service Details: USN-2311-1 fixed vulnerabilities in pyCADF. This update provides the corresponding updates for OpenStack Ceilometer. Original advisory details: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST requests. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: ceilometer-common 2014.1.2-0ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2311-2 https://ubuntu.com/security/notices/USN-2311-1 CVE-2014-4615 Package Information: https://launchpad.net/ubuntu/+source/ceilometer/2014.1.2-0ubuntu1.1 . Ubuntu Security Alert USN-2312-3 addresses the Nova issue leaking critical information. Immediate upgrade is advised for protection.. OpenStack Ceilometer, Information Exposure, Ubuntu Security Notice. . LinuxSecurity.com Team

Aug 21, 2014 Ubuntu