OpenStack Glance Exploit Repaired in Ubuntu 12.10

On January 29, Canonical published in a security notice details about an OpenStack Nova vulnerability for its Ubuntu 12.10, Ubuntu 12.04 LTS, and Ubuntu 11.10 operating systems.

According to Canonical, Glance could have been made to expose sensitive information over the network.

An issue in Glance error reporting was discovered. An authenticated attacker could exploit this to expose the Glance operator's Swift credentials for a misconfigured or otherwise unusable Swift endpoint.

The security flaws can be fixed if you upgrade your system(s) to the latest python-glance package, specific to each distribution. To apply the update, run the Update Manager application.

In general, a standard system update will make all the necessary changes. A system restart won't be necessary to implement the changes, but users have to restart the virtual machine.

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.