| 2014-03-10 20:20:59 |
Marc Heckmann |
bug |
|
|
added bug |
| 2014-03-11 15:13:40 |
Jeremy Stanley |
bug task added |
|
ossa |
|
| 2014-03-11 15:14:14 |
Jeremy Stanley |
ossa: status |
New |
Incomplete |
|
| 2014-03-11 15:14:49 |
Jeremy Stanley |
bug |
|
|
added subscriber Nova Core security contacts |
| 2014-03-12 13:29:35 |
Andrew Laski |
nova: status |
New |
Confirmed |
|
| 2014-03-19 14:10:54 |
Thierry Carrez |
ossa: importance |
Undecided |
Medium |
|
| 2014-03-19 14:10:54 |
Thierry Carrez |
ossa: status |
Incomplete |
Confirmed |
|
| 2014-03-20 23:09:16 |
Andrew Laski |
attachment added |
|
0001-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch https://bugs.launchpad.net/nova/+bug/1290537/+attachment/4034806/+files/0001-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch |
|
| 2014-03-28 19:13:33 |
Marc Heckmann |
bug |
|
|
added subscriber Alexis Tremblay |
| 2014-03-31 14:08:28 |
Jeremy Stanley |
nova: assignee |
|
Andrew Laski (alaski) |
|
| 2014-03-31 14:12:45 |
Thierry Carrez |
nominated for series |
|
nova/havana |
|
| 2014-03-31 14:12:45 |
Thierry Carrez |
bug task added |
|
nova/havana |
|
| 2014-04-01 09:49:23 |
Tristan Cacqueray |
ossa: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-04-01 14:36:05 |
Thierry Carrez |
tags |
ec2 security |
ec2 icehouse-rc-potential security |
|
| 2014-04-01 15:45:39 |
Russell Bryant |
bug |
|
|
added subscriber Christopher Yeoh |
| 2014-04-02 10:15:30 |
Thierry Carrez |
ossa: status |
Confirmed |
Triaged |
|
| 2014-04-03 10:14:31 |
Tristan Cacqueray |
summary |
RBAC policy not enforced when adding a security group rule using EC2 API |
RBAC policy not enforced when adding a security group rule using EC2 API (CVE-2014-0167) |
|
| 2014-04-03 10:14:39 |
Tristan Cacqueray |
cve linked |
|
2014-0167 |
|
| 2014-04-03 20:22:33 |
Andrew Laski |
attachment added |
|
0001-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch https://bugs.launchpad.net/nova/+bug/1290537/+attachment/4063897/+files/0001-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch |
|
| 2014-04-03 20:39:49 |
Andrew Laski |
attachment added |
|
0002-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch https://bugs.launchpad.net/nova/+bug/1290537/+attachment/4063904/+files/0002-Add-RBAC-policy-for-ec2-API-security-groups-calls.patch |
|
| 2014-04-04 09:59:06 |
Tristan Cacqueray |
ossa: status |
Triaged |
In Progress |
|
| 2014-04-04 14:12:53 |
Tristan Cacqueray |
ossa: status |
In Progress |
Fix Committed |
|
| 2014-04-08 09:07:56 |
Thierry Carrez |
nova: status |
Confirmed |
In Progress |
|
| 2014-04-08 09:07:56 |
Thierry Carrez |
nova: milestone |
|
icehouse-rc2 |
|
| 2014-04-08 14:55:15 |
Thierry Carrez |
nova: importance |
Undecided |
High |
|
| 2014-04-09 15:01:16 |
Tristan Cacqueray |
information type |
Private Security |
Public Security |
|
| 2014-04-09 17:36:29 |
OpenStack Infra |
nova: status |
In Progress |
Fix Committed |
|
| 2014-04-09 18:50:34 |
Thierry Carrez |
nova/havana: status |
New |
In Progress |
|
| 2014-04-09 20:54:06 |
OpenStack Infra |
nova: status |
Fix Committed |
Fix Released |
|
| 2014-04-09 20:55:29 |
OpenStack Infra |
nova/havana: status |
In Progress |
Fix Committed |
|
| 2014-04-10 08:47:49 |
Tristan Cacqueray |
summary |
RBAC policy not enforced when adding a security group rule using EC2 API (CVE-2014-0167) |
[0SSA 2014-011] RBAC policy not enforced when adding a security group rule using EC2 API (CVE-2014-0167) |
|
| 2014-04-10 08:47:56 |
Tristan Cacqueray |
ossa: status |
Fix Committed |
Fix Released |
|
| 2014-04-17 09:19:00 |
Thierry Carrez |
nova: milestone |
icehouse-rc2 |
2014.1 |
|
| 2014-09-22 17:40:07 |
Alan Pevec |
nova/havana: milestone |
|
2013.2.4 |
|
| 2014-09-22 22:20:17 |
Alan Pevec |
nova/havana: status |
Fix Committed |
Fix Released |
|
| 2014-09-30 09:39:54 |
Alan Pevec |
nova/havana: importance |
Undecided |
High |
|
| 2014-09-30 09:40:01 |
Alan Pevec |
nova/havana: assignee |
|
Andrew Laski (alaski) |
|
| 2014-09-30 09:40:48 |
Alan Pevec |
tags |
ec2 icehouse-rc-potential security |
ec2 security |
|
