[Openstack-security] [openstack/cinder] SecurityImpact review request change Ic57b2aceb136e8626388cfe4df72b2f47cb0661c

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Fri Oct 24 15:17:52 UTC 2014


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/130821

Log:
commit cd71414a1299ed875db019561b782982723ce668
Author: abhishekkekane <abhishek.kekane at nttdata.com>
Date:   Tue Oct 21 02:31:15 2014 -0700

    Eventlet green threads not released back to pool
    
    Presently, the wsgi server allows persist connections hence even after
    the response is sent to the client, it doesn't close the client socket
    connection.
    Because of this problem, the green thread is not released back to the pool.
    
    In order to close the client socket connection explicitly after the
    response is sent and read successfully by the client, you simply have to
    set keepalive to False when you create a wsgi server.
    
    DocImpact:
    Added wsgi_keep_alive option (default=True).
    
    SecurityImpact
    
    Closes-Bug: #1361360
    Change-Id: Ic57b2aceb136e8626388cfe4df72b2f47cb0661c





More information about the Openstack-security mailing list