Open Stack

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 05/08/14 04:19, Yaguang Tang wrote:
> Hi all,
> 
> I'd like to propose the following exception to be included in the
> next Icehouse release: https://review.openstack.org/#/c/99536/
> 
> This is a security related fix, it fixes block device auth_password
> key get logged at debug level.

Do we need OSSA to be released for the issue?

> It may be not critical because generally debug won't be enabled at 
> production environment, but we can't assume all users follow the
> suggestion. It's better to get this fixed early than later.
> 

I agree. Security related fixes *are* critical.

> 
> The patch  was already get approved but failed to merge duo to
> conflict now patch is updated and get a +2.

Already approved by Alan.

/Ihar
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCgAGBQJT4IjOAAoJEC5aWaUY1u57pcAIAOqN4r34qVFNKBryH+8PqQkw
jPopM5/2yYMKSNFeEDJdwO5iy+cJlyXHtQbiIlUj6jHeY7jZlnHT/LlcqVf6rYw7
onVeQJ4SVPocmmykhetG8uoL6GE04cttbf+xXSc/GeUa6b3qsBWy4tWEGBDgXgrr
Jz2V+nRG78Q74+Z8/nPVdjFSKA67wUA9sD+8FZn7DrZQdy7z58d1fMiT7QmV6nkC
91Mf9F58gj/ihdmihuyXMjit8a+Rq+d5ySnazcRGEzZ6D2pGbWItWCmp3nmJ521m
8b7fuA4sy8n3izMBPB1R2EhN68YjWFWezHsiLuDW9Iayq6pe3nBSNT8j9qoeUzo=
=FeOT
-----END PGP SIGNATURE-----