Glance

  1. Bug #1546507
  2. Comment #39

Comment 39 for bug 1546507

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: Regular user can delete any image file

Based on above comment and other related issue (bug 1549483 and bug 1555590), I'd like to handle image-location issues as class B2 type of bug according to VMT taxonomy ( http://security.openstack.org/vmt-process.html#incident-report-taxonomy ).

I'm switching the OSSA task status to opinion until a Security Note (OSSN) is defined.
However if a backportable fix can be implemented, then we can revert that decision and issue an advisory.