oslo.utils can log LUKS key material from LUKSv1 images
Original title: [OSSN-0111] oslo.utils can log LUKS key material
OSSN-0111 says a passphrase inspection can log enough material to decrypt the image; versions are not in the excerpt.
OpenStack security note OSSN-0111, posted by Brian Rosmaita on October 22, says the LUKS inspector in oslo.utils can log cryptographic material when it inspects a LUKSv1 image with a passphrase. The note says that material can be enough to decrypt the image. The excerpt names oslo.utils and then cuts off before versions or a fix.
Unconfirmed: The excerpt cuts off before affected versions, a fix, or any statement on exploitation.
- The note is dated October 22 and numbered OSSN-0111.
- Only LUKSv1 images inspected with a passphrase are described.
- No CVE, affected version or fixed release appears in the excerpt.
Impact: Enough LUKS key material to decrypt the image
| Product | Affected |
|---|---|
| OpenStack oslo.utils | — |
- Vendors
- OpenStack
- Products
- oslo.utils
From the original article
Posted by Brian Rosmaita on Oct 22 ============================================================ OSSN-0111: oslo. utils can log LUKS key material (2026-10-22) ============================================================ Summary ~~~~~~~ The LUKS inspector in oslo. utils can log cryptographic material when it inspects a LUKSv1 image with a passphrase.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.