OpenStack Glance Vulnerability Fixed in Ubuntu 12.10

Just update the system in order to fix the problems

By on March 16th, 2013 16:04 GMT

On March 15, Canonical published in a security notice details about OpenStack Glance vulnerability for its Ubuntu 12.10 and Ubuntu 12.04 operating systems.

According to Canonical, Glance could be made to expose sensitive information over the network.

Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator's Swift and/or S3 credentials via the response headers when requesting a cached image.

For a more detailed description of the security problems, you can visit Canonical's security notification.

The security flaws can be fixed if you upgrade your system(s) to the latest python-glance package specific to each distribution. To apply the update, run the Update Manager application.

In general, a standard system update will make all the necessary changes. A system restart will not be needed to implement the changes.

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
Ubuntu 12.10 desktop
   Ubuntu 12.10 desktop
MORE ON THIS TOPIC
LATEST NEWS
HOT RIGHT NOW

Comments