potential default value leakage in LaunchImageNG
Bug #1466894 reported by
Yves-Gwenael Bourhis
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Dashboard (Horizon) |
Fix Released
|
Medium
|
Yves-Gwenael Bourhis | ||
Bug Description
LaunchImageNG uses a mutable as default parameter.
This can lead to potential leakage because the default value is evaluated only once and any potential changes done to the default arguments will be kept for further instances.
I don't think it's a security vulnerability at this stage, but it can potentially lead to it.
| Changed in horizon: | |
| assignee: | nobody → Yves-Gwenael Bourhis (yves-gwenael-bourhis) |
| status: | New → In Progress |
Revision history for this message
| Yves-Gwenael Bourhis (yves-gwenael-bourhis) wrote | #1 |
| Changed in horizon: | |
| status: | In Progress → Fix Committed |
| Changed in horizon: | |
| importance: | Undecided → Medium |
| milestone: | none → liberty-1 |
| Changed in horizon: | |
| status: | Fix Committed → Fix Released |
| Changed in horizon: | |
| milestone: | liberty-1 → 8.0.0 |
To post a comment you must log in.
Fix proposed to branch: master
Review: https:/