Comment 28 for bug 1677723

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: federated user gets wrong role (CVE-2017-2673)

Beside a pep8 error, tox verified patch #27 on stable/ocata.

./keystone/tests/unit/test_v3_federation.py:1940:5: E303 too many blank lines (2)
    def test_issue_unscoped_token_malformed_environment(self):
    ^

Considering we may not have covered all the edge cases, it seems like a good idea to mention Mitaka as affected. Though the branch will probably be EOLed by the time the patch are proposed on gerrit, and the tests doesn't applies cleanly on mitaka's branch.