Back to bug 2181765

Who When What Removed Added
Nick Tait 2023-03-25 18:22:06 UTC CC security-response-team
Yadnyawalk Tale 2023-03-31 11:26:43 UTC Comment 0 updated
Nick Tait 2023-03-31 22:50:01 UTC Severity low medium
Priority low medium
Nick Tait 2023-03-31 22:52:41 UTC Depends On 2183651, 2183652, 2183653
Nick Tait 2023-03-31 22:57:27 UTC Depends On 2183654
Yadnyawalk Tale 2023-04-03 12:36:45 UTC CC jjung, ytale
Nick Tait 2023-04-21 22:47:06 UTC Doc Text A vulnerability was discovered in OpenStack Barbican containers. This vulnerability is only applicable to deployments which utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER and NET namespace with the host system and other OpenStack services. If any service is compromised it could gain access the data transmitted to and from Barbican.
Nick Tait 2023-04-21 22:49:40 UTC Group security, qe_staff
Summary EMBARGOED CVE-2023-1636 openstack-barbican: incomplete container isolation CVE-2023-1636 openstack-barbican: incomplete container isolation
Nick Tait 2023-04-21 22:50:01 UTC Depends On 2188735
RaTasha Tillery-Smith 2023-04-24 12:42:29 UTC Doc Text A vulnerability was discovered in OpenStack Barbican containers. This vulnerability is only applicable to deployments which utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER and NET namespace with the host system and other OpenStack services. If any service is compromised it could gain access the data transmitted to and from Barbican. A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.
Salvatore Bonaccorso 2023-04-24 19:32:57 UTC Flags needinfo?(security-response-team)
CC carnil
Product Security DevOps Team 2023-04-25 00:32:18 UTC Flags needinfo?(security-response-team) needinfo?(ntait)
Nick Tait 2023-05-03 20:46:51 UTC Flags needinfo?(ntait)
JP Jung 2023-05-17 15:07:53 UTC CC dmendiza, dwilde, ggrasza
Red Hat Bugzilla 2023-07-07 08:34:30 UTC Assignee security-response-team nobody
CC security-response-team

Back to bug 2181765