OpenStack Compute (nova)

  1. Bug #1409142
  2. Comment #103

Comment 103 for bug 1409142

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: Websocket Hijacking Vulnerability in Nova VNC Server (CVE-2015-0259)

Thomas, the NoVNC fix is standalone and not dependent of this bug.

Please do not use the above patch as they have not been reviewed/approved yet. Once we are confident it fixes issues mentioned here, we'll issue a follow up on the pre-OSSA with a new disclosure date.

If it's good by Thursday, the new disclosure date would be:
2015-03-10, 1500UTC

Thanks in advance for your patience.