OpenStack Identity (keystone)

  1. Bug #1324592
  2. Comment #49

Comment 49 for bug 1324592

Revision history for this message
Steven Hardy (shardy) wrote : Re: Trust scope can be circumvented by chaining trusts (CVE-2014-3476)

+1 for master patch in #26 - I've pulled that and tested it, and can confirm it resolves the reported issue.

I've not tested the stable backports.