UbuntuUpdates.org

Package "python-oslo.middleware"

Name: python-oslo.middleware

Description:

various WSGI middleware components for OpenStack - Python 2.x
Latest version: 3.8.0-2ubuntu1
Release: xenial (16.04)
Level: security
Repository: main
Homepage: https://github.com/openstack/oslo.middleware

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-oslo.middleware"

All arch deb package
APT INSTALL

Other versions of "python-oslo.middleware" in Xenial

Repository Area Version
base universe 3.8.0-2
base main 3.8.0-2
security universe 3.8.0-2ubuntu1
updates universe 3.8.0-2ubuntu1
updates main 3.8.0-2ubuntu1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.8.0-2ubuntu1 2018-05-31 02:06:30 UTC

  python-oslo.middleware (3.8.0-2ubuntu1) xenial-security; urgency=medium

  * SECURITY UPDATE: Information disclosure in log file (LP: #1628031)
    - d/p/filter-token-data-out-of-catch_errors-middleware.patch:
      ensure sensitive token data is not written to log file.
    - CVE-2017-2592

 -- Corey Bryant <email address hidden> Thu, 10 May 2018 10:00:18 -0400
1628031 [OSSA-2017-001] CatchErrors leaks sensitive values in oslo.middleware (CVE-2017-2592)
CVE-2017-2592 python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could in


About   -   Send Feedback to @ubuntu_updates