Description
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | openstack-ceilometer | fixed in 12.0.0.0rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ceilometer | 1:11.0.1-5 | — |
| Debian 13 | ceilometer | 1:11.0.1-5 | — |
| Debian 12 | ceilometer | 1:11.0.1-5 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 14 | python-ceilometer +7 | 1:11.0.2-0.20190117115822.50f268f.el7ost | RHSA-2019:0580 |
| Red Hat OpenStack 13 | python-ceilometer +7 | 1:10.0.1-6.el7ost | RHSA-2019:0566 |
| Red Hat OpenStack 10 | python-ceilometer +10 | 1:7.1.1-9.el7ost | RHSA-2019:0919 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ceilometer | < 12.0.0.0rc1 | 12.0.0.0rc1 | GHSA-2cvf-r9jm-4qm9 |
Advisories 3
- RHSA-2019:0919 Red Hat Security Advisory: openstack-ceilometer security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2019:0566 Red Hat Security Advisory: openstack-ceilometer security and bug fix update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2019:0580 Red Hat Security Advisory: openstack-ceilometer security and bug fix update Red Hat Security Advisories (RHSA) · Aug 8, 2026