April 2015 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Wed Apr 1 00:21:23 UTC 2015
Ending: Thu Apr 30 22:19:24 UTC 2015
Messages: 152

• [Openstack-security] [Bug 1260525] Re: Incomplete XSS fix for ossa/1247675   OpenStack Infra
  • [Openstack-security] [Bug 1260525] Re: Incomplete XSS fix for ossa/1247675   Lin Hua Cheng
  • [Openstack-security] [Bug 1260525] Re: Incomplete XSS fix for ossa/1247675   Thierry Carrez
  • [Openstack-security] [Bug 1260525] Re: Incomplete XSS fix for ossa/1247675   Thierry Carrez
• [Openstack-security] [Bug 1252519] Re: Live migration failed because of file permission changed   Pawel Koniszewski
  • [Openstack-security] [Bug 1252519] Re: Live migration failed because of file permission changed   Eli Qiao
    • [Openstack-security] [Bug 1252519] Re: Live migration failed because of file permission changed   Eli Qiao
• [Openstack-security] [Bug 1409142] Related fix proposed to nova (master)   OpenStack Infra
• [Openstack-security] [Bug 1409142] Fix proposed to nova (master)   OpenStack Infra
• [Openstack-security] [Bug 1368040] Re: random.choice in /cinder/volume/utils.py may has potential security issue   Sean Dague
• [Openstack-security] [Bug 1372375] Re: Attaching LVM encrypted volumes (with LUKS) could cause data loss if LUKS headers get corrupted   Sean Dague
  • [Openstack-security] [Bug 1372375] Re: Attaching LVM encrypted volumes (with LUKS) could cause data loss if LUKS headers get corrupted   John Griffith
  • [Openstack-security] [Bug 1372375] Re: Attaching LVM encrypted volumes (with LUKS) could cause data loss if LUKS headers get corrupted   Patrizio Tufarolo
  • [Openstack-security] [Bug 1372375] Re: Attaching LVM encrypted volumes (with LUKS) could cause data loss if LUKS headers get corrupted   Joel Coffman
  • [Openstack-security] [Bug 1372375] Re: Attaching LVM encrypted volumes (with LUKS) could cause data loss if LUKS headers get corrupted   Dane Fichter
• [Openstack-security] [Bug 1427228] Fix merged to neutron (master)   OpenStack Infra
• [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Thierry Carrez
  • [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Dolph Mathews
  • [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Morgan Fainberg
  • [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Robert Clark
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ie8d653eed2fea244be6fa535ed6fd003ea15c2bb   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1430951] Re: Revocation causes duplicate (and overly broad?) events in revocation table   Morgan Fainberg
  • [Openstack-security] [Bug 1430951] Re: Revocation causes duplicate (and overly broad?) events in revocation table   OpenStack Infra
  • [Openstack-security] [Bug 1430951] Re: Revocation causes duplicate (and overly broad?) events in revocation table   OpenStack Infra
• [Openstack-security] [openstack/keystone] SecurityImpact review request change I577d4435d551181298b23e713ed84f76d9f1ba3e   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1419577] Re: when live-migrate failed, lun-id couldn't be rollback in havana   Matthew Edmonds
  • [Openstack-security] [Bug 1419577] Re: when live-migrate failed, lun-id couldn't be rollback in havana   Jeremy Stanley
• [Openstack-security] [Bug 1379077] Re: Tenants can be created with invalid ids   Morgan Fainberg
• [Openstack-security] [Bug 1427228] Re: Allow to run neutron-ns-metadata-proxy as nobody   OpenStack Infra
  • [Openstack-security] [Bug 1427228] Re: Allow to run neutron-ns-metadata-proxy as nobody   Thierry Carrez
  • [Openstack-security] [Bug 1427228] Re: Allow to run neutron-ns-metadata-proxy as nobody   Thierry Carrez
• [Openstack-security] [Bug 1381365] Re: SSL Version and cipher selection not possible   Morgan Fainberg
• [Openstack-security] [Bug 1381365] Related fix proposed to keystone (master)   OpenStack Infra
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   OpenStack Infra
  • [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Kyle Mestery
  • [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Kyle Mestery
  • [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Kevin Benton
  • [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Juergen Brendel
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Sergey Lukjanov
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Morgan Fainberg
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   OpenStack Infra
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Thierry Carrez
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Thierry Carrez
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Thierry Carrez
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Thierry Carrez
  • [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Brant Knudson
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Bogdan Dobrelya
• [Openstack-security] [Bug 1381365] Related fix merged to keystone (master)   OpenStack Infra
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I7c079b779245a0af6bc793564fa8a560e4226afe   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/neutron] SecurityImpact review request change I7c079b779245a0af6bc793564fa8a560e4226afe   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1274034] Fix merged to neutron (master)   OpenStack Infra
• [Openstack-security] [Bug 1409142] Related fix merged to nova (master)   OpenStack Infra
• [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Adam Gandelman
  • [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Adam Gandelman
  • [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Jeremy Stanley
  • [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Nikola Đipanov
  • [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Thierry Carrez
• [Openstack-security] [Bug 1394988] Re: Hadoop with auto security group not working   Adam Gandelman
  • [Openstack-security] [Bug 1394988] Re: Hadoop with auto security group not working   Thierry Carrez
• [Openstack-security] [Bug 1391520] Re: Create CDH cluster with auto security group failed   Adam Gandelman
  • [Openstack-security] [Bug 1391520] Re: Create CDH cluster with auto security group failed   Thierry Carrez
• [Openstack-security] [Bug 1414532] Re: asserts used in cache.py   Thierry Carrez
  • [Openstack-security] [Bug 1414532] Re: asserts used in cache.py   Michael McCune
  • [Openstack-security] [Bug 1414532] Re: asserts used in cache.py   Thierry Carrez
  • [Openstack-security] [Bug 1414532] Re: asserts used in cache.py   Nathan Kinder
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ie948ccc999f79300d7449944406f063d62a95533   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1417762] Re: XSS in network create error reporting   David Lyle
  • [Openstack-security] [Bug 1417762] Re: XSS in network create error reporting   Jeremy Stanley
• [Openstack-security] [Bug 1445335] [NEW] create/delete flavor permissions should be controlled by policy.json   Divya K Konoor
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   Alex Xu
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   Divya K Konoor
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   Divya K Konoor
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   OpenStack Infra
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   Alex Xu
• [Openstack-security] [Bug 1414532] Fix proposed to glance (stable/juno)   OpenStack Infra
• [Openstack-security] [Bug 1414532] Fix proposed to glance (stable/icehouse)   OpenStack Infra
• [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   John Garbutt
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   John Garbutt
  • [Openstack-security] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json   Jeremy Stanley
• [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Thierry Carrez
  • [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Morgan Fainberg
  • [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Robert Clark
  • [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Nathan Kinder
• [Openstack-security] [Bug 1440958] Re: loosen validation on matching trusted dashboard   David Stanek
• [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Charles Neill
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Douglas Mendizábal
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   OpenStack Infra
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Thierry Carrez
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Douglas Mendizábal
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Douglas Mendizábal
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   OpenStack Infra
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   OpenStack Infra
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   OpenStack Infra
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Thierry Carrez
  • [Openstack-security] [Bug 1446406] Re: Insecure signing_dir configuration in barbican-api-paste.ini   Thierry Carrez
• [Openstack-security] [Bug 1446406] Related fix proposed to barbican (master)   OpenStack Infra
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I9ef57a86b1a1c1fa4ba1a034c920f23cb40072c0   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1369870] Re: The "message" cookie is not marked as "secure"   Kent Wang
• [Openstack-security] [Bug 1372375] OpenStack Docs   Dane Fichter
  • [Openstack-security] [Bug 1372375] OpenStack Docs   Robert Clark
• [Openstack-security] [Bug 1414532] Change abandoned on glance (stable/icehouse)   OpenStack Infra
• [Openstack-security] [Bug 1274034] Related fix merged to neutron (master)   OpenStack Infra
• [Openstack-security] [Bug 1361360] Fix proposed to keystone (stable/kilo)   OpenStack Infra
• [Openstack-security] [openstack/keystone] SecurityImpact review request change I03b9c5c64f4bd8bca78dfc83199ef17d9a7ea5b7   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/keystone] SecurityImpact review request change I03b9c5c64f4bd8bca78dfc83199ef17d9a7ea5b7   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1361360] Fix proposed to keystone (stable/juno)   OpenStack Infra
• [Openstack-security] [openstack/glance-specs] SecurityImpact review request change I305b2ae86415c8d256c641abb2795af663bee56a   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/glance-specs] SecurityImpact review request change I305b2ae86415c8d256c641abb2795af663bee56a   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I3c66e92cbe8883dcad843ad243388def3a96dbe5   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/neutron] SecurityImpact review request change I3c66e92cbe8883dcad843ad243388def3a96dbe5   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/neutron] SecurityImpact review request change I3c66e92cbe8883dcad843ad243388def3a96dbe5   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/neutron] SecurityImpact review request change I3c66e92cbe8883dcad843ad243388def3a96dbe5   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/neutron] SecurityImpact review request change I3c66e92cbe8883dcad843ad243388def3a96dbe5   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change Ic115eeb59cbacdafb85296d435322ea8b8cc99d6   gerrit2 at review.openstack.org
• [Openstack-security] [stackforge/networking-ovs-dpdk] SecurityImpact review request change I82426b8d5951d2c96e72e42818bfae90b8301076   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change Idbe37922c5f944e3d567ce16913ce5d87af41fef   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/nova] SecurityImpact review request change Idbe37922c5f944e3d567ce16913ce5d87af41fef   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/nova] SecurityImpact review request change Idbe37922c5f944e3d567ce16913ce5d87af41fef   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1424089] Re: Use SystemRandom rather than random   Dolph Mathews
  • [Openstack-security] [Bug 1424089] Re: Use SystemRandom rather than random   Thierry Carrez
• [Openstack-security] [openstack/barbican-specs] SecurityImpact review request change Iccdfca4f309c50b7507f0a0992bec561045784f0   gerrit2 at review.openstack.org
  • [Openstack-security] [openstack/barbican-specs] SecurityImpact review request change Iccdfca4f309c50b7507f0a0992bec561045784f0   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1118066] Re: Nova should confirm quota requests against Keystone   Mh Raies
  • [Openstack-security] [Bug 1118066] Re: Nova should confirm quota requests against Keystone   Mh Raies
• [Openstack-security] [Bug 1031139] Re: quota-show should return error for invalid tenant id   Mh Raies
• [Openstack-security] [Bug 1328488] Re: oslo apiclient logs sensitive data   Thierry Carrez
• [Openstack-security] [Bug 1428829] Re: Fernet tokens don't return audit_ids   Thierry Carrez
• [Openstack-security] [Bug 1375857] Re: It's not possibile to pass the cacert to the swift store   Thierry Carrez
• [Openstack-security] [Bug 1348416] Re: Popen with shell=True   Thierry Carrez
• [Openstack-security] [Bug 1380642] Re: Horizon should not log token   Thierry Carrez
• [Openstack-security] [Bug 1400872] Re: Show password feature should be configurable   Thierry Carrez
• [Openstack-security] [Bug 1420863] Re: Default setting should be secure   Thierry Carrez
  • [Openstack-security] [Bug 1420863] Re: Default setting should be secure   Mark Vanderwiel
• [Openstack-security] [Bug 1391518] Re: [HDP] Create HDP cluster with auto security group failed   Thierry Carrez
• [Openstack-security] [Bug 1393397] Re: Create Spark cluster with auto security group failed   Thierry Carrez
• [Openstack-security] [Bug 1382562] Re: security groups remote_group fails with CIDR in address pairs   Thierry Carrez
• [Openstack-security] [Bug 1187107] Re: quantum-ns-metadata-proxy runs as root   Thierry Carrez
• [Openstack-security] [Bug 1372635] Re: MITM vulnerability with EMC VMAX driver   Thierry Carrez
• [Openstack-security] [Bug 1384626] Re: SSL certification verification failed when Heat calls Glanceclient with ca cert   Thierry Carrez
• [Openstack-security] [Bug 1406191] Re: node-show discloses credentials as plain text in driver_info   Thierry Carrez
• [Openstack-security] [Bug 1442343] Re: Mapping openstack_project attribute in k2k assertions with different domains   Thierry Carrez
  • [Openstack-security] [Bug 1442343] Re: Mapping openstack_project attribute in k2k assertions with different domains   Rodrigo Duarte
    • [Openstack-security] [Bug 1442343] Re: Mapping openstack_project attribute in k2k assertions with different domains   Rodrigo Duarte
    • [Openstack-security] [Bug 1442343] Re: Mapping openstack_project attribute in k2k assertions with different domains   OpenStack Infra
  • [Openstack-security] [Bug 1442343] Re: Mapping openstack_project attribute in k2k assertions with different domains   Brant Knudson
• [Openstack-security] [Bug 1442787] Re: Mapping openstack_user attribute in k2k assertions with different domains   Brant Knudson
  • [Openstack-security] [Bug 1442787] Re: Mapping openstack_user attribute in k2k assertions with different domains   Rodrigo Duarte
    • [Openstack-security] [Bug 1442787] Re: Mapping openstack_user attribute in k2k assertions with different domains   Rodrigo Duarte
    • [Openstack-security] [Bug 1442787] Re: Mapping openstack_user attribute in k2k assertions with different domains   OpenStack Infra
    • [Openstack-security] [Bug 1442787] Re: Mapping openstack_user attribute in k2k assertions with different domains   OpenStack Infra
• [Openstack-security] [Bug 1442343] Fix proposed to keystone (stable/kilo)   OpenStack Infra
• [Openstack-security] [OpenStack][Product Work Group] [Enterprise][API][Telco][Dev] [Security][Operators][Marketing][User Committee] Cross-Project Vancouver Work Session   Barrett, Carol L

Last message date: Thu Apr 30 22:19:24 UTC 2015
Archived on: Mon Jun 17 19:18:47 UTC 2019

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...