An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.
{
"binaries": [
{
"binary_name": "cinder-api",
"binary_version": "2:8.1.1-0ubuntu3"
},
{
"binary_name": "cinder-backup",
"binary_version": "2:8.1.1-0ubuntu3"
},
{
"binary_name": "cinder-common",
"binary_version": "2:8.1.1-0ubuntu3"
},
{
"binary_name": "cinder-scheduler",
"binary_version": "2:8.1.1-0ubuntu3"
},
{
"binary_name": "cinder-volume",
"binary_version": "2:8.1.1-0ubuntu3"
},
{
"binary_name": "python-cinder",
"binary_version": "2:8.1.1-0ubuntu3"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "cinder-api",
"binary_version": "2:12.0.10-0ubuntu2.2"
},
{
"binary_name": "cinder-backup",
"binary_version": "2:12.0.10-0ubuntu2.2"
},
{
"binary_name": "cinder-common",
"binary_version": "2:12.0.10-0ubuntu2.2"
},
{
"binary_name": "cinder-scheduler",
"binary_version": "2:12.0.10-0ubuntu2.2"
},
{
"binary_name": "cinder-volume",
"binary_version": "2:12.0.10-0ubuntu2.2"
},
{
"binary_name": "python-cinder",
"binary_version": "2:12.0.10-0ubuntu2.2"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nova-ajax-console-proxy",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-api",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-api-metadata",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-api-os-compute",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-api-os-volume",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-cells",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-common",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-kvm",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-libvirt",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-lxc",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-qemu",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-vmware",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-compute-xen",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-conductor",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-console",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-consoleauth",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-network",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-novncproxy",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-placement-api",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-scheduler",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-serialproxy",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-spiceproxy",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-volume",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "nova-xvpvncproxy",
"binary_version": "2:17.0.13-0ubuntu5.2"
},
{
"binary_name": "python-nova",
"binary_version": "2:17.0.13-0ubuntu5.2"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "cinder-api",
"binary_version": "2:16.4.2-0ubuntu2.1"
},
{
"binary_name": "cinder-backup",
"binary_version": "2:16.4.2-0ubuntu2.1"
},
{
"binary_name": "cinder-common",
"binary_version": "2:16.4.2-0ubuntu2.1"
},
{
"binary_name": "cinder-scheduler",
"binary_version": "2:16.4.2-0ubuntu2.1"
},
{
"binary_name": "cinder-volume",
"binary_version": "2:16.4.2-0ubuntu2.1"
},
{
"binary_name": "python3-cinder",
"binary_version": "2:16.4.2-0ubuntu2.1"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "glance",
"binary_version": "2:20.2.0-0ubuntu1.1"
},
{
"binary_name": "glance-api",
"binary_version": "2:20.2.0-0ubuntu1.1"
},
{
"binary_name": "glance-common",
"binary_version": "2:20.2.0-0ubuntu1.1"
},
{
"binary_name": "python3-glance",
"binary_version": "2:20.2.0-0ubuntu1.1"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nova-ajax-console-proxy",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-api",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-api-metadata",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-api-os-compute",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-api-os-volume",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-cells",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-common",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-kvm",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-libvirt",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-lxc",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-qemu",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-vmware",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-compute-xen",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-conductor",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-novncproxy",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-scheduler",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-serialproxy",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-spiceproxy",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "nova-volume",
"binary_version": "2:21.2.4-0ubuntu2.1"
},
{
"binary_name": "python3-nova",
"binary_version": "2:21.2.4-0ubuntu2.1"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "cinder-api",
"binary_version": "2:20.1.0-0ubuntu1"
},
{
"binary_name": "cinder-backup",
"binary_version": "2:20.1.0-0ubuntu1"
},
{
"binary_name": "cinder-common",
"binary_version": "2:20.1.0-0ubuntu1"
},
{
"binary_name": "cinder-scheduler",
"binary_version": "2:20.1.0-0ubuntu1"
},
{
"binary_name": "cinder-volume",
"binary_version": "2:20.1.0-0ubuntu1"
},
{
"binary_name": "python3-cinder",
"binary_version": "2:20.1.0-0ubuntu1"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "glance",
"binary_version": "2:24.1.0-0ubuntu1.1"
},
{
"binary_name": "glance-api",
"binary_version": "2:24.1.0-0ubuntu1.1"
},
{
"binary_name": "glance-common",
"binary_version": "2:24.1.0-0ubuntu1.1"
},
{
"binary_name": "python3-glance",
"binary_version": "2:24.1.0-0ubuntu1.1"
}
]
}{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nova-ajax-console-proxy",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-api",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-api-metadata",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-api-os-compute",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-api-os-volume",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-cells",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-common",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-ironic",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-kvm",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-libvirt",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-lxc",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-qemu",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-vmware",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-compute-xen",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-conductor",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-novncproxy",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-scheduler",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-serialproxy",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-spiceproxy",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "nova-volume",
"binary_version": "3:25.1.0-0ubuntu1"
},
{
"binary_name": "python3-nova",
"binary_version": "3:25.1.0-0ubuntu1"
}
]
}{
"binaries": [
{
"binary_name": "nova-ajax-console-proxy",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-api",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-api-metadata",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-api-os-compute",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-api-os-volume",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-cells",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-cert",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-common",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-kvm",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-libvirt",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-lxc",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-qemu",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-vmware",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-compute-xen",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-conductor",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-console",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-consoleauth",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-network",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-novncproxy",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-scheduler",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-serialproxy",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-spiceproxy",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-volume",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "nova-xvpvncproxy",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
},
{
"binary_name": "python-nova",
"binary_version": "2:13.1.4-0ubuntu4.5+esm1"
}
]
}