[Openstack-security] [openstack/horizon] SecurityImpact review request change I0127fe09d211cec231dab26d5987dafe720c91dd
gerrit2 at review.openstack.org
gerrit2 at review.openstack.org
Thu Oct 16 13:20:49 UTC 2014
Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/128916
Log:
commit 3a64723917366eff4d8896b2b2d3d82fa462d25d
Author: Brant Knudson <bknudson at us.ibm.com>
Date: Sun Aug 24 10:04:10 2014 -0500
Document token hash algorithm option
With https://review.openstack.org/#/c/116509/ ,
django-openstack-auth will support a new option for the token hash
algorithm. This adds the documentation to Horizon's local settings
example file.
This is for security hardening. The token hash algorithm defaults
to MD5, which is considered too weak due to the potential for hash
collisions. Some security standards require a SHA2 hash algorithm to
be used.
DocImpact
SecurityImpact
Change-Id: I6774b9b7215d191259586e4721e357487bb777cd
Closes-Bug: #1174499
(cherry picked from commit 372d033d89c0f5d305959a6ad5fd3e1159cc91ed)
commit f1a8abb9250f158ba1f04cf2055f717e78ef8184
Author: Akihiro Motoki <motoki at da.jp.nec.com>
Date: Sun Oct 5 03:53:51 2014 +0900
Warn OPENSTACK_QUANTUM_NETWORK setting as deprecated
Change-Id: If2f762fe665b9a88153a77a658f52bcd56185c53
Closes-Bug: #1377498
(cherry picked from commit 530e5fee789ce5ed19d90a6b4901f01e8efde5ff)
commit 9b0ba951c07af13aa4c386b19876474b971e7946
Author: Akihiro Motoki <motoki at da.jp.nec.com>
Date: Sun Oct 5 14:23:43 2014 +0900
Import translations from Transifex for Juno
* Import ~100% completed translations
(translations available for 12 languages)
* Update language list in openstack_dashboard settings.py
* Update English POT files
* Update Transifex resource name in .tx/config for Juno.
* Remove compiled message catalogs (Related-Bug: #1196982)
Closes-Bug: #1376542
The instruction on how to compile message catalogs will be
covered by https://review.openstack.org/#/c/126169/
or the installation guide.
Change-Id: Ib36562168009fa34b9818e99154df350678abd4b
More information about the Openstack-security
mailing list