OpenStack Heat

  1. Bug #1496277
  2. Comment #58

Comment 58 for bug 1496277

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: template-validate may read server local files (CVE-2015-5295)

Though, the python-heatclient is still affected, I had to use direct curl in order to verify the issue was fixed for the API.

What's the status for the client, is it going to be fixed or should we add a Note to the advisory about it ?