OpenStack Heat

  1. Bug #1496277
  2. Comment #45

Comment 45 for bug 1496277

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: template-validate may read server local files (CVE-2015-5295)

Steven, any feedback from the test scenario described in comment #44 ?

Zane, the patch doesn't apply cleanly using "git am", can you please format the proposed patch using "git format-patch --stdout HEAD~1". Also it doesn't apply cleanly on stable/liberty nor stable/kilo. Ideally we would need three different patch for each branch.

IIUC, this patch needs to be applied on top of status:merged project:openstack/heat branch:master topic:bug/1518458...
Will those patches need be backported before disclosing this bug ?