The volumeutils.parsevolumeinfo function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-api", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-api-ec2", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-api-metadata", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-api-os-compute", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-api-os-volume", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-baremetal", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-cells", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-cert", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-common", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-kvm", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-libvirt", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-lxc", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-qemu", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-vmware", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-compute-xen", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-conductor", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-console", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-consoleauth", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-doc", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-network", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-novncproxy", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-objectstore", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-scheduler", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-spiceproxy", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-volume", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "nova-xvpvncproxy", "binary_version": "1:2014.1.5-0ubuntu1.7" }, { "binary_name": "python-nova", "binary_version": "1:2014.1.5-0ubuntu1.7" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-api", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-api-ec2", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-api-metadata", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-api-os-compute", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-api-os-volume", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-cells", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-cert", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-common", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-kvm", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-libvirt", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-lxc", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-qemu", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-vmware", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-compute-xen", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-conductor", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-console", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-consoleauth", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-doc", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-network", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-novncproxy", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-objectstore", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-scheduler", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-serialproxy", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-spiceproxy", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-volume", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "nova-xvpvncproxy", "binary_version": "2:12.0.0-0ubuntu2" }, { "binary_name": "python-nova", "binary_version": "2:12.0.0-0ubuntu2" } ] }