[Bug 2021980] [NEW] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)

Corey Bryant 2021980 at bugs.launchpad.net
Wed May 31 13:46:36 UTC 2023 

Public bug reported:

OpenStack security advisory:
https://security.openstack.org/ossa/OSSA-2023-003.html

Note: This is the second attempt at patching this CVE. The first time
with the embargo patches resulted in an ironic regression. There have
also been additional changes since the embargo patches. We also want to
coordinate documentation better this time as service tokens are now
required.

** Affects: cloud-archive
     Importance: High
         Status: Triaged

** Affects: cloud-archive/antelope
     Importance: High
         Status: Triaged

** Affects: cloud-archive/bobcat
     Importance: High
         Status: Triaged

** Affects: cloud-archive/ussuri
     Importance: Undecided
         Status: New

** Affects: cloud-archive/victoria
     Importance: Undecided
         Status: New

** Affects: cloud-archive/wallaby
     Importance: Undecided
         Status: New

** Affects: cloud-archive/xena
     Importance: Undecided
         Status: New

** Affects: cloud-archive/yoga
     Importance: High
         Status: Triaged

** Affects: cloud-archive/zed
     Importance: High
         Status: Triaged

** Affects: cinder (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: ironic (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: nova (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: python-glance-store (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: python-os-brick (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: cinder (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: ironic (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: nova (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: python-glance-store (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: python-os-brick (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: cinder (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: ironic (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: nova (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: python-glance-store (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: python-os-brick (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: cinder (Ubuntu Jammy)
     Importance: High
         Status: Triaged

** Affects: ironic (Ubuntu Jammy)
     Importance: High
         Status: Triaged

** Affects: nova (Ubuntu Jammy)
     Importance: High
         Status: Triaged

** Affects: python-glance-store (Ubuntu Jammy)
     Importance: High
         Status: Triaged

** Affects: python-os-brick (Ubuntu Jammy)
     Importance: High
         Status: Triaged

** Affects: cinder (Ubuntu Kinetic)
     Importance: High
         Status: Triaged

** Affects: ironic (Ubuntu Kinetic)
     Importance: High
         Status: Triaged

** Affects: nova (Ubuntu Kinetic)
     Importance: High
         Status: Triaged

** Affects: python-glance-store (Ubuntu Kinetic)
     Importance: High
         Status: Triaged

** Affects: python-os-brick (Ubuntu Kinetic)
     Importance: High
         Status: Triaged

** Affects: cinder (Ubuntu Lunar)
     Importance: High
         Status: Triaged

** Affects: ironic (Ubuntu Lunar)
     Importance: High
         Status: Triaged

** Affects: nova (Ubuntu Lunar)
     Importance: High
         Status: Triaged

** Affects: python-glance-store (Ubuntu Lunar)
     Importance: High
         Status: Triaged

** Affects: python-os-brick (Ubuntu Lunar)
     Importance: High
         Status: Triaged

** Affects: cinder (Ubuntu Mantic)
     Importance: High
         Status: Triaged

** Affects: ironic (Ubuntu Mantic)
     Importance: High
         Status: Triaged

** Affects: nova (Ubuntu Mantic)
     Importance: High
         Status: Triaged

** Affects: python-glance-store (Ubuntu Mantic)
     Importance: High
         Status: Triaged

** Affects: python-os-brick (Ubuntu Mantic)
     Importance: High
         Status: Triaged

** Also affects: nova (Ubuntu Mantic)
   Importance: Undecided
       Status: New

** Also affects: nova (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: nova (Ubuntu Lunar)
   Importance: Undecided
       Status: New

** Also affects: nova (Ubuntu Kinetic)
   Importance: Undecided
       Status: New

** Also affects: nova (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Also affects: nova (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Changed in: nova (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: nova (Ubuntu Jammy)
   Importance: Undecided => High

** Changed in: nova (Ubuntu Kinetic)
       Status: New => Triaged

** Changed in: nova (Ubuntu Kinetic)
   Importance: Undecided => High

** Changed in: nova (Ubuntu Lunar)
       Status: New => Triaged

** Changed in: nova (Ubuntu Lunar)
   Importance: Undecided => High

** Changed in: nova (Ubuntu Mantic)
       Status: New => Triaged

** Changed in: nova (Ubuntu Mantic)
   Importance: Undecided => High

** Also affects: cinder (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: cinder (Ubuntu Jammy)
   Importance: Undecided => High

** Changed in: cinder (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: cinder (Ubuntu Kinetic)
   Importance: Undecided => High

** Changed in: cinder (Ubuntu Kinetic)
       Status: New => Triaged

** Changed in: cinder (Ubuntu Lunar)
   Importance: Undecided => High

** Changed in: cinder (Ubuntu Lunar)
       Status: New => Triaged

** Changed in: cinder (Ubuntu Mantic)
   Importance: Undecided => High

** Changed in: cinder (Ubuntu Mantic)
       Status: New => Triaged

** Also affects: python-os-brick (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: python-glance-store (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: ironic (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: cloud-archive
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/bobcat
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/ussuri
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/antelope
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/zed
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/xena
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/yoga
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/wallaby
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/victoria
   Importance: Undecided
       Status: New

** No longer affects: cloud-archive/ussuri

** Changed in: cloud-archive/antelope
   Importance: Undecided => High

** Changed in: cloud-archive/antelope
       Status: New => Triaged

** Changed in: cloud-archive/bobcat
   Importance: Undecided => High

** Changed in: cloud-archive/bobcat
       Status: New => Triaged

** Changed in: cloud-archive/yoga
   Importance: Undecided => High

** Changed in: cloud-archive/yoga
       Status: New => Triaged

** Changed in: cloud-archive/zed
   Importance: Undecided => High

** Changed in: cloud-archive/zed
       Status: New => Triaged

** Changed in: ironic (Ubuntu Jammy)
   Importance: Undecided => High

** Changed in: ironic (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: ironic (Ubuntu Kinetic)
   Importance: Undecided => High

** Changed in: ironic (Ubuntu Kinetic)
       Status: New => Triaged

** Changed in: ironic (Ubuntu Lunar)
   Importance: Undecided => High

** Changed in: ironic (Ubuntu Lunar)
       Status: New => Triaged

** Changed in: ironic (Ubuntu Mantic)
   Importance: Undecided => High

** Changed in: ironic (Ubuntu Mantic)
       Status: New => Triaged

** Changed in: python-glance-store (Ubuntu Jammy)
   Importance: Undecided => High

** Changed in: python-glance-store (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: python-glance-store (Ubuntu Kinetic)
   Importance: Undecided => High

** Changed in: python-glance-store (Ubuntu Kinetic)
       Status: New => Triaged

** Changed in: python-glance-store (Ubuntu Lunar)
   Importance: Undecided => High

** Changed in: python-glance-store (Ubuntu Lunar)
       Status: New => Triaged

** Changed in: python-glance-store (Ubuntu Mantic)
   Importance: Undecided => High

** Changed in: python-glance-store (Ubuntu Mantic)
       Status: New => Triaged

** Changed in: python-os-brick (Ubuntu Mantic)
   Importance: Undecided => High

** Changed in: python-os-brick (Ubuntu Mantic)
       Status: New => Triaged

** Changed in: python-os-brick (Ubuntu Lunar)
   Importance: Undecided => High

** Changed in: python-os-brick (Ubuntu Lunar)
       Status: New => Triaged

** Changed in: python-os-brick (Ubuntu Kinetic)
   Importance: Undecided => High

** Changed in: python-os-brick (Ubuntu Kinetic)
       Status: New => Triaged

** Changed in: python-os-brick (Ubuntu Jammy)
   Importance: Undecided => High

** Changed in: python-os-brick (Ubuntu Jammy)
       Status: New => Triaged

** No longer affects: cloud-archive/victoria

** Also affects: cloud-archive/victoria
   Importance: Undecided
       Status: New

** Also affects: cloud-archive/ussuri
   Importance: Undecided
       Status: New

** Description changed:

  OpenStack security advisory:
  https://security.openstack.org/ossa/OSSA-2023-003.html
  
- Note: This is the 2nd attempt at patching this CVE. The first time with
- the embargo patches resulted in an ironic regression. There have also
- been additional changes since the embargo patches. We also want to
+ Note: This is the second attempt at patching this CVE. The first time
+ with the embargo patches resulted in an ironic regression. There have
+ also been additional changes since the embargo patches. We also want to
  coordinate documentation better this time as service tokens are now
  required.

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/2021980

Title:
  Unauthorized volume access through deleted volume attachments
  (CVE-2023-2088)

Status in Ubuntu Cloud Archive:
  Triaged
Status in Ubuntu Cloud Archive antelope series:
  Triaged
Status in Ubuntu Cloud Archive bobcat series:
  Triaged
Status in Ubuntu Cloud Archive ussuri series:
  New
Status in Ubuntu Cloud Archive victoria series:
  New
Status in Ubuntu Cloud Archive wallaby series:
  New
Status in Ubuntu Cloud Archive xena series:
  New
Status in Ubuntu Cloud Archive yoga series:
  Triaged
Status in Ubuntu Cloud Archive zed series:
  Triaged
Status in cinder package in Ubuntu:
  Triaged
Status in ironic package in Ubuntu:
  Triaged
Status in nova package in Ubuntu:
  Triaged
Status in python-glance-store package in Ubuntu:
  Triaged
Status in python-os-brick package in Ubuntu:
  Triaged
Status in cinder source package in Bionic:
  New
Status in ironic source package in Bionic:
  New
Status in nova source package in Bionic:
  New
Status in python-glance-store source package in Bionic:
  New
Status in python-os-brick source package in Bionic:
  New
Status in cinder source package in Focal:
  New
Status in ironic source package in Focal:
  New
Status in nova source package in Focal:
  New
Status in python-glance-store source package in Focal:
  New
Status in python-os-brick source package in Focal:
  New
Status in cinder source package in Jammy:
  Triaged
Status in ironic source package in Jammy:
  Triaged
Status in nova source package in Jammy:
  Triaged
Status in python-glance-store source package in Jammy:
  Triaged
Status in python-os-brick source package in Jammy:
  Triaged
Status in cinder source package in Kinetic:
  Triaged
Status in ironic source package in Kinetic:
  Triaged
Status in nova source package in Kinetic:
  Triaged
Status in python-glance-store source package in Kinetic:
  Triaged
Status in python-os-brick source package in Kinetic:
  Triaged
Status in cinder source package in Lunar:
  Triaged
Status in ironic source package in Lunar:
  Triaged
Status in nova source package in Lunar:
  Triaged
Status in python-glance-store source package in Lunar:
  Triaged
Status in python-os-brick source package in Lunar:
  Triaged
Status in cinder source package in Mantic:
  Triaged
Status in ironic source package in Mantic:
  Triaged
Status in nova source package in Mantic:
  Triaged
Status in python-glance-store source package in Mantic:
  Triaged
Status in python-os-brick source package in Mantic:
  Triaged

Bug description:
  OpenStack security advisory:
  https://security.openstack.org/ossa/OSSA-2023-003.html

  Note: This is the second attempt at patching this CVE. The first time
  with the embargo patches resulted in an ironic regression. There have
  also been additional changes since the embargo patches. We also want
  to coordinate documentation better this time as service tokens are now
  required.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/2021980/+subscriptions

More information about the Ubuntu-openstack-bugs mailing list