September 2015 Archives by date

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...

Starting: Tue Sep 1 11:13:36 UTC 2015
Ending: Wed Sep 30 18:59:03 UTC 2015
Messages: 151

• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Matthew Mosesohn
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1118066] Re: Nova should confirm quota requests against Keystone   Mh Raies
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Sergey Lukjanov
• [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Dolph Mathews
• [Openstack-security] [Bug 1491218] Re: [api] no checks of request tenant_id during querying service last status of an environment   OpenStack Infra
• [Openstack-security] [Security] Weekly meeting cancelled due to Mid-Cycle   Clark, Robert Graham
• [Openstack-security] [Bug 1451931] Re: ironic password config not marked as secret   Michael McCune
• [Openstack-security] [Bug 1470740] Re: swiftclient disclose token in debug logs   N Dillon
• [Openstack-security] [Bug 1464750] Re: Service accounts can be used to login horizon   Robert Clark
• [Openstack-security] [Bug 1457551] Re: Another Horizon login page vulnerability to a DoS attack   Robert Clark
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Robert Clark
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Robert Clark
• [Openstack-security] [Bug 1436082] Re: VMWare and HTTP stores do not verify HTTPS Connections as they use httplib.HTTPSConnection   Robert Clark
• [Openstack-security] [Bug 1436082] Re: VMWare and HTTP stores do not verify HTTPS Connections as they use httplib.HTTPSConnection   Jamie Finnigan
• [Openstack-security] [Bug 1457551] Re: Another Horizon login page vulnerability to a DoS attack   Robert Clark
• [Openstack-security] [Bug 1163569] Re: security groups don't work with vip and ovs plugin   Robert Clark
• [Openstack-security] [Bug 1457551] Re: Another Horizon login page vulnerability to a DoS attack   Robert Clark
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Travis McPeak
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Doug Chivers
• [Openstack-security] [Bug 1470740] Re: swiftclient disclose token in debug logs   Doug Chivers
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Robert Clark
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Doug Chivers
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Michael Xin
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Doug Chivers
• [Openstack-security] [Bug 1436082] Re: VMWare and HTTP stores do not verify HTTPS Connections as they use httplib.HTTPSConnection   Grant Murphy
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Will Auld
• [Openstack-security] [Bug 1329214] Re: tgtadm iscsi chap does not work   Michael McCune
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Travis McPeak
• [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Doug Chivers
• [Openstack-security] [Bug 1464750] Re: Service accounts can be used to login horizon   Travis McPeak
• [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Doug Chivers
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1450798] Re: Multiple command injection vulns in schema_diff tool   John Garbutt
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Michael Xin
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Dave McCowan
• [Openstack-security] [Bug 1417762] Re: XSS in network create error reporting   Thierry Carrez
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   OpenStack Infra
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Robert Clark
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Robert Clark
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Jamie Finnigan
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Robert Clark
• [Openstack-security] [Bug 1329214] Re: tgtadm iscsi chap does not work   Michael McCune
• [Openstack-security] [Bug 1436082] Re: VMWare and HTTP stores do not verify HTTPS Connections as they use httplib.HTTPSConnection   Robert Clark
• [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Shellee Aragon
• [Openstack-security] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens   Doug Chivers
• [Openstack-security] [Bug 1175905] Re: passlib failure to sanitize env variables PASSLIB_MAX_PASSWORD_SIZE   Doug Hellmann
• [Openstack-security] [Bug 1470740] Re: swiftclient disclose token in debug logs   Robert Clark
• [Openstack-security] [Bug 1490693] Re: session fails to sanitize response body of passwords   OpenStack Infra
• [Openstack-security] [Bug 1490693] Re: session fails to sanitize response body of passwords   Doug Hellmann
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Sylvain Bauza
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Dave McCowan
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Jeremy Stanley
• [Openstack-security] [Bug 1492961] Re: Security Group Rules not effective immediately   Jeremy Stanley
• [Openstack-security] [Bug 1369627] Change abandoned on nova (stable/kilo)   OpenStack Infra
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Wei Wang
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Tristan Cacqueray
• [Openstack-security] [Bug 1274034] Related fix proposed to neutron (master)   OpenStack Infra
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Malini Bhandaru
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ia8e7fcc21d7c15e480facbe30af88cdce2d73159   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1274034] Related fix merged to neutron (master)   OpenStack Infra
• [Openstack-security] [Bug 1367022] Re: Un-sanitized eval may have security impact   Lianhao Lu
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   Dolph Mathews
• [Openstack-security] [Bug 1376915] Change abandoned on ceilometer (master)   OpenStack Infra
• [Openstack-security] [Bug 1491218] Re: [api] no checks of request tenant_id during querying service last status of an environment   Serg Melikyan
• [Openstack-security] [Bug 1367022] Re: Un-sanitized eval may have security impact   gordon chung
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Matt Riedemann
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Jeremy Stanley
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Matt Riedemann
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Matt Riedemann
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   OpenStack Infra
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   Dolph Mathews
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   OpenStack Infra
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ia8e7fcc21d7c15e480facbe30af88cdce2d73159   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ia8e7fcc21d7c15e480facbe30af88cdce2d73159   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change I32cace0fb5f5ccf12638de4abd527aad5a6ec4ac   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Tristan Cacqueray
• [Openstack-security] [Bug 1163569] Re: security groups don't work with vip and ovs plugin   Kyle Mestery
• [Openstack-security] [openstack/nova] SecurityImpact review request change I9866d8e32e99b9f907921f4b226edf7b62bd83a7   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1376915] Re: Access to sensitive audit data is not properly restricted   gordon chung
• [Openstack-security] [openstack/neutron] SecurityImpact review request change I1f8311f1b9ae1be02afde3e9078e49c6da373a88   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Chet Burgess
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Kevin Benton
• [Openstack-security] [Bug 1417762] Re: XSS in network create error reporting   David Lyle
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   Chet Burgess
• [Openstack-security] [Bug 1274034] Related fix proposed to neutron (feature/pecan)   OpenStack Infra
• [Openstack-security] [Bug 1274034] Related fix proposed to neutron (feature/pecan)   OpenStack Infra
• [Openstack-security] [Bug 1470740] Re: swiftclient disclose token in debug logs   Nathan Kinder
• [Openstack-security] [Bug 1464750] Re: Service accounts can be used to login horizon   Nathan Kinder
• [Openstack-security] [Bug 1457551] Re: Another Horizon login page vulnerability to a DoS attack   Nathan Kinder
• [Openstack-security] [Bug 1329214] Re: tgtadm iscsi chap does not work   Nathan Kinder
• [Openstack-security] [Bug 1274034] Related fix merged to neutron (feature/pecan)   OpenStack Infra
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   OpenStack Infra
• [Openstack-security] [openstack/heat] SecurityImpact review request change I303d87addeed8b103eeb26dbcc48e3acce06ee6a   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1435530] Re: keystonemiddleware without TRL checking and default cache config can allow access after token revocation   Nathan Kinder
• [Openstack-security] [openstack/heat] SecurityImpact review request change I303d87addeed8b103eeb26dbcc48e3acce06ee6a   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Sergey Lukjanov
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   OpenStack Infra
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   OpenStack Infra
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Tristan Cacqueray
• [Openstack-security] [Bug 1274034] Change abandoned on neutron (feature/pecan)   OpenStack Infra
• [Openstack-security] [Bug 1274034] Re: Neutron firewall anti-spoofing does not prevent ARP poisoning   OpenStack Infra
• [Openstack-security] [openstack/keystone] SecurityImpact review request change Icf8dd2f0b88abc89092d487bbcefb525960c4ec6   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/keystone] SecurityImpact review request change I82d00898ee2b28aad1ace7554a436cf7125d631c   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 938315] Re: [OSSA-2013-013] Updating password via keystoneclient CLI should be done securely   Ken
• [Openstack-security] [Bug 938315] Re: [OSSA-2013-013] Updating password via keystoneclient CLI should be done securely   Jeremy Stanley
• [Openstack-security] [Bug 1484237] Re: token revocations not always respected when using fernet tokens   Thierry Carrez
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Matt Riedemann
• [Openstack-security] [openstack/nova-specs] SecurityImpact review request change Ia8e7fcc21d7c15e480facbe30af88cdce2d73159   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Tristan Cacqueray
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Tristan Cacqueray
• [Openstack-security] [Bug 1498726] Re: Specify ciphers with HAProxy SSL frontends   Dolph Mathews
• [Openstack-security] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation   Nathan Kinder
• [Openstack-security] [Bug 1436082] Re: VMWare and HTTP stores do not verify HTTPS Connections as they use httplib.HTTPSConnection   Nathan Kinder
• [Openstack-security] [Bug 1498726] Re: Specify ciphers with HAProxy SSL frontends   OpenStack Infra
• [Openstack-security] [Bug 1491307] Re: secgroup rules doesn't work for instance immediately   Thierry Carrez
• [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Rui Yuan Dou
• [Openstack-security] [Bug 1409142] Re: [OSSA 2015-005] Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)   Grant Murphy
• [Openstack-security] [Bug 1379077] Re: Tenants can be created with invalid ids   Morgan Fainberg
• [Openstack-security] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests   Morgan Fainberg
• [Openstack-security] [Bug 1376915] Re: Access to sensitive audit data is not properly restricted   Thierry Carrez
• [Openstack-security] [Bug 1498726] Fix proposed to openstack-ansible (kilo)   OpenStack Infra
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/swift] SecurityImpact review request change I1f629987fbc8c59406432faad9cb2bfa34b5eccc   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1499555] Re: You can crash keystone or make the DB very slow by assigning many roles   Dolph Mathews
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1456228] Re: Trusted vm can be powered on untrusted host   Matt Riedemann
• [Openstack-security] [Bug 1492398] Re: VXLAN Overlay ping issue when Gateway IP is set to one of local NIC's IP address   Jeremy Stanley
• [Openstack-security] [Bug 1498726] Re: Specify ciphers with HAProxy SSL frontends   OpenStack Infra
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [openstack/nova] SecurityImpact review request change I64859ad01120782fb17308aac3abb125597c3ea2   gerrit2 at review.openstack.org
• [Openstack-security] [Bug 1419577] Re: when live-migrate failed, lun-id couldn't be rollback in havana   Matt Riedemann
• [Openstack-security] [Bug 1456228] Related fix merged to nova (master)   OpenStack Infra
• [Openstack-security] [Bug 1163569] Re: security groups don't work with vip and ovs plugin   Armando Migliaccio
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Matthew Mosesohn
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Matthew Mosesohn
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Matthew Mosesohn
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   OpenStack Infra
• [Openstack-security] [Bug 1355509] Re: Better conductor deployment   Roman Podoliaka
• [Openstack-security] [Bug 1321785] Re: RFE: block_device_info dict should have a password key rather than clear password   Matt Riedemann

Last message date: Wed Sep 30 18:59:03 UTC 2015
Archived on: Mon Jun 17 19:18:48 UTC 2019

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...