Home[1] Files[2] News[3] Contact[4] Add New[5]
- Ubuntu Security Notice USN-5369-1[6]
- Authored by Ubuntu[7] | Site security.ubuntu.com[8]
-
Ubuntu Security Notice 5369-1 - It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
- systems | linux[9], ubuntu[10]
- advisories | CVE-2022-0718[11]
- MD5 |
14627fe0a8d5fb308bed0b7e05d5c978 - Download[12] | Favorite[13] | View[14]
Change Mirror[15] Download[16]
=========================================================================
Ubuntu Security Notice USN-5369-1
April 07, 2022
python-oslo.utils vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
Summary:
oslo.utils could be made to expose sensitive information if it received
a specially crafted input.
Software Description:
- python-oslo.utils: Oslo Utility library - doc
Details:
It was discovered that oslo.utils incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
python3-oslo.utils 4.10.0-0ubuntu1.1
Ubuntu 20.04 LTS:
python3-oslo.utils 4.1.1-0ubuntu1.1
Ubuntu 18.04 LTS:
python-oslo.utils 3.35.0-0ubuntu1.1
python3-oslo.utils 3.35.0-0ubuntu1.1
Ubuntu 16.04 ESM:
python-oslo.utils 3.8.0-2ubuntu0.1~esm1
python3-oslo.utils 3.8.0-2ubuntu0.1~esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5369-1
CVE-2022-0718
Package Information:
https://launchpad.net/ubuntu/+source/python-oslo.utils/4.10.0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/python-oslo.utils/4.1.1-0ubuntu1.1
https://launchpad.net/ubuntu/+source/python-oslo.utils/3.35.0-0ubuntu1.1
File Tags
- ActiveX[22] (932)
- Advisory[23] (77,089)
- Arbitrary[24] (15,029)
- BBS[25] (2,859)
- Bypass[26] (1,543)
- CGI[27] (1,010)
- Code Execution[28] (6,606)
- Conference[29] (668)
- Cracker[30] (797)
- CSRF[31] (3,265)
- DoS[32] (21,686)
- Encryption[33] (2,325)
- Exploit[34] (49,537)
- File Inclusion[35] (4,139)
- File Upload[36] (936)
- Firewall[37] (821)
- Info Disclosure[38] (2,539)
- Intrusion Detection[39] (847)
- Java[40] (2,762)
- JavaScript[41] (791)
- Kernel[42] (5,979)
- Local[43] (13,961)
- Magazine[44] (586)
- Overflow[45] (12,114)
- Perl[46] (1,410)
- PHP[47] (5,037)
- Proof of Concept[48] (2,276)
- Protocol[49] (3,278)
- Python[50] (1,382)
- Remote[51] (29,534)
- Root[52] (3,440)
- Ruby[53] (574)
- Scanner[54] (1,629)
- Security Tool[55] (7,658)
- Shell[56] (3,042)
- Shellcode[57] (1,200)
- Sniffer[58] (879)
- Spoof[59] (2,075)
- SQL Injection[60] (15,954)
- TCP[61] (2,349)
- Trojan[62] (668)
- UDP[63] (866)
- Virus[64] (657)
- Vulnerability[65] (30,321)
- Web[66] (8,943)
- Whitepaper[67] (3,706)
- x86[68] (942)
- XSS[69] (17,272)
- Other[70]
File Archives
- April 2022[71]
- March 2022[72]
- February 2022[73]
- January 2022[74]
- December 2021[75]
- November 2021[76]
- October 2021[77]
- September 2021[78]
- August 2021[79]
- July 2021[80]
- June 2021[81]
- May 2021[82]
- Older[83]
Systems
- AIX[84] (424)
- Apple[85] (1,875)
- BSD[86] (368)
- CentOS[87] (55)
- Cisco[88] (1,911)
- Debian[89] (5,947)
- Fedora[90] (1,690)
- FreeBSD[91] (1,241)
- Gentoo[92] (4,152)
- HPUX[93] (876)
- iOS[94] (316)
- iPhone[95] (108)
- IRIX[96] (220)
- Juniper[97] (67)
- Linux[98] (41,784)
- Mac OS X[99] (683)
- Mandriva[100] (3,105)
- NetBSD[101] (255)
- OpenBSD[102] (477)
- RedHat[103] (11,264)
- Slackware[104] (941)
- Solaris[105] (1,605)
- SUSE[106] (1,444)
- Ubuntu[107] (7,710)
- UNIX[108] (9,040)
- UnixWare[109] (183)
- Windows[110] (6,334)
- Other[111]
- Services
- Security Services[122]
- Hosting By
- Rokasec[123]
Read more https://packetstormsecurity.com/files/166639/USN-5369-1.txt


