<div dir="ltr"><div class="gmail_extra">A backport for the first bug is now in review:</div><div class="gmail_extra"><br></div><div class="gmail_extra"><a href="https://bugs.launchpad.net/ossa/+bug/1348820" target="_blank">https://bugs.launchpad.net/ossa/+bug/1348820</a></div>

<div class="gmail_extra">master <a href="https://review.openstack.org/#/c/109747/">https://review.openstack.org/#/c/109747/</a> (merged)</div><div class="gmail_extra">stable/icehouse <a href="https://review.openstack.org/#/c/111772/">https://review.openstack.org/#/c/111772/</a></div>

<div class="gmail_extra"><br></div><div class="gmail_extra">But at the moment, we're actually still working to land complete fixes for the second two in master.</div><div class="gmail_extra"><br></div><div class="gmail_extra">

<a href="https://bugs.launchpad.net/ossa/+bug/1349597" target="_blank">https://bugs.launchpad.net/ossa/+bug/1349597</a><br></div><div class="gmail_extra">master <a href="https://review.openstack.org/#/c/109820/">https://review.openstack.org/#/c/109820/</a> (gating at this moment; this also should have been Closes-Bug)</div>

<div class="gmail_extra"><br></div><div class="gmail_extra"><a href="https://bugs.launchpad.net/ossa/+bug/1347961" target="_blank">https://bugs.launchpad.net/ossa/+bug/1347961</a><br>master <a href="https://review.openstack.org/#/c/111106/">https://review.openstack.org/#/c/111106/</a> (gating at this moment)</div>

<div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 4, 2014 at 9:57 AM, Thierry Carrez <span dir="ltr"><<a href="mailto:thierry@openstack.org" target="_blank">thierry@openstack.org</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Hi,<br>
<br>
This is me with my Vulnerability Management team hat on.<br>
<br>
We have a number of security issues in keystone where the patch landed<br>
on master and just needs an icehouse backport:<br>
<br>
<a href="https://bugs.launchpad.net/ossa/+bug/1348820" target="_blank">https://bugs.launchpad.net/ossa/+bug/1348820</a><br>
<a href="https://bugs.launchpad.net/ossa/+bug/1349597" target="_blank">https://bugs.launchpad.net/ossa/+bug/1349597</a><br>
<a href="https://bugs.launchpad.net/ossa/+bug/1347961" target="_blank">https://bugs.launchpad.net/ossa/+bug/1347961</a><br>
<br>
It might be worth including those security fixes in 2014.1.2 (rather<br>
than land them a few days after)...<br>
<br>
We are working on getting backports proposed for those.<br>
<br>
Cheers,<br>
<span class=""><font color="#888888"><br>
--<br>
Thierry Carrez (ttx)<br>
<br>
_______________________________________________<br>
Openstack-stable-maint mailing list<br>
<a href="mailto:Openstack-stable-maint@lists.openstack.org">Openstack-stable-maint@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-stable-maint" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-stable-maint</a><br>
</font></span></blockquote></div><br></div></div>