Re: [Openstack-stable-maint] [nova] Freeze exception

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

On 05/08/14 04:19, Yaguang Tang wrote:

Hi all,

I'd like to propose the following exception to be included in the next Icehouse release: https://review.openstack.org/#/c/99536/

This is a security related fix, it fixes block device auth_password key get logged at debug level.

Do we need OSSA to be released for the issue?

It may be not critical because generally debug won't be enabled at production environment, but we can't assume all users follow the suggestion. It's better to get this fixed early than later.

I agree. Security related fixes *are* critical.

The patch was already get approved but failed to merge duo to conflict now patch is updated and get a +2.

Already approved by Alan.

/Ihar