Comment 5 for bug 2012588

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/878416
Committed: https://opendev.org/openstack/kolla-ansible/commit/d907790fffaf392f40ac5e6d824e72995c1f612c
Submitter: "Zuul (22348)"
Branch: master

commit d907790fffaf392f40ac5e6d824e72995c1f612c
Author: Maksim Malchuk <email address hidden>
Date: Thu Mar 23 16:49:45 2023 +0300

    Add LimitRequestBody configuration for Horizon

    Since CVE-2022-29404 is fixed [1,2] the default value for the
    LimitRequestBody directive in the Apache HTTP Server has been changed
    from 0 (unlimited) to 1 GiB. This limits the size of images (for
    example) uploaded in Horizon. This change add the ability to
    configure the limit.

    1. https://access.redhat.com/articles/6975397
    2. https://ubuntu.com/security/CVE-2022-29404

    Closes-Bug: #2012588
    Change-Id: I4cd9dd088cbcf38ff6f8d188ebcc56be7d9ea1c9
    Signed-off-by: Maksim Malchuk <email address hidden>