Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 681012 - <sys-auth/keystone-{1.30.3-r1, 1.33.2-r1}: stale cache data when server disconnects/reconnects due to a network partition
Summary: <sys-auth/keystone-{1.30.3-r1, 1.33.2-r1}: stale cache data when server disco...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: B3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2019-03-20 13:36 UTC by Agostino Sarubbo
Modified: 2019-05-07 19:48 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2019-03-20 13:36:05 UTC
From ${URL} :

A flaw was found in openstack-keystone. Stale data can be utilized from a cache server that disconnected due to a network partition. This is 
because the flush_on_reconnect optional flag is not used.


Upstream Bug:
https://bugs.launchpad.net/keystone/+bug/1819957



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 1 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2019-04-29 23:00:08 UTC
I have open reviews to backport the fix to both of the stable branch versions we track in gentoo

https://review.opendev.org/#/c/656419 and https://review.opendev.org/#/c/656420
Comment 2 Larry the Git Cow gentoo-dev 2019-05-07 01:54:15 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6942f27b246cddf9fdf08dcd89a08b2e6107071e

commit 6942f27b246cddf9fdf08dcd89a08b2e6107071e
Author:     Matthew Thode <prometheanfire@gentoo.org>
AuthorDate: 2019-05-07 01:53:47 +0000
Commit:     Matthew Thode <prometheanfire@gentoo.org>
CommitDate: 2019-05-07 01:54:03 +0000

    dev-python/oslo-cache: fix stale cache on network partition
    
    Bug: https://bugs.gentoo.org/681012
    Package-Manager: Portage-2.3.62, Repoman-2.3.12
    RepoMan-Options: --force
    Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>

 dev-python/oslo-cache/Manifest                                    | 1 +
 .../{oslo-cache-1.30.3.ebuild => oslo-cache-1.30.3-r1.ebuild}     | 7 ++++++-
 .../{oslo-cache-1.33.2.ebuild => oslo-cache-1.33.2-r1.ebuild}     | 8 +++++++-
 3 files changed, 14 insertions(+), 2 deletions(-)
Comment 3 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2019-05-07 01:54:48 UTC
fixed in tree