| 2014-07-17 21:04:18 |
Amrith Kumar |
bug |
|
|
added bug |
| 2014-07-17 21:04:32 |
Amrith Kumar |
oslo: assignee |
|
Amrith (amrith) |
|
| 2014-07-17 21:05:04 |
Amrith Kumar |
bug |
|
|
added subscriber Doug Shelley |
| 2014-07-17 23:27:38 |
Grant Murphy |
bug task added |
|
ossa |
|
| 2014-07-17 23:27:51 |
Grant Murphy |
oslo: status |
New |
Incomplete |
|
| 2014-07-17 23:27:59 |
Grant Murphy |
oslo: status |
Incomplete |
New |
|
| 2014-07-17 23:28:03 |
Grant Murphy |
ossa: status |
New |
Incomplete |
|
| 2014-07-19 23:39:16 |
Grant Murphy |
ossa: status |
Incomplete |
Confirmed |
|
| 2014-07-22 00:48:05 |
Grant Murphy |
information type |
Private Security |
Public Security |
|
| 2014-07-22 02:58:17 |
OpenStack Infra |
oslo: status |
New |
In Progress |
|
| 2014-07-22 11:31:02 |
Tristan Cacqueray |
ossa: importance |
Undecided |
High |
|
| 2014-07-22 11:31:06 |
Tristan Cacqueray |
ossa: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-07-24 21:05:35 |
Amrith Kumar |
summary |
Exceptions thrown by execute() return a command that potentially includes passwords |
Exceptions thrown by execute() return information that potentially includes passwords |
|
| 2014-07-24 21:06:24 |
Amrith Kumar |
description |
Currently when execute() throws a ProcessExecutionError, it returns the command without masking passwords. In the one place where it logs the command, it correctly masks the password.
It would be prudent to mask the password in the exception as well so that upstream catchers don't have to go through the mask_password() motions. |
Currently when execute() throws a ProcessExecutionError, it returns the command without masking passwords. In the one place where it logs the command, it correctly masks the password.
It would be prudent to mask the password in the exception as well so that upstream catchers don't have to go through the mask_password() motions.
The same also goes for stdout and stderr information which should be sanitized. |
|
| 2014-07-24 21:21:30 |
Amrith Kumar |
summary |
Exceptions thrown by execute() return information that potentially includes passwords |
Exceptions thrown, and messages logged by execute() may include passwords |
|
| 2014-07-28 14:52:30 |
Thierry Carrez |
ossa: importance |
High |
Medium |
|
| 2014-07-29 21:11:47 |
Tristan Cacqueray |
bug |
|
|
added subscriber Cinder Core security contacts |
| 2014-07-29 21:11:56 |
Tristan Cacqueray |
bug |
|
|
added subscriber Trove Core Security Team |
| 2014-07-29 21:12:04 |
Tristan Cacqueray |
bug |
|
|
added subscriber Nova Core security contacts |
| 2014-07-31 09:19:51 |
Thierry Carrez |
bug task added |
|
trove |
|
| 2014-07-31 09:20:06 |
Thierry Carrez |
bug task added |
|
cinder |
|
| 2014-07-31 09:20:20 |
Thierry Carrez |
bug task added |
|
nova |
|
| 2014-07-31 09:21:28 |
Thierry Carrez |
nominated for series |
|
nova/icehouse |
|
| 2014-07-31 09:21:28 |
Thierry Carrez |
bug task added |
|
nova/icehouse |
|
| 2014-07-31 09:21:28 |
Thierry Carrez |
nominated for series |
|
nova/havana |
|
| 2014-07-31 09:21:28 |
Thierry Carrez |
bug task added |
|
nova/havana |
|
| 2014-07-31 09:21:50 |
Thierry Carrez |
nominated for series |
|
trove/havana |
|
| 2014-07-31 09:21:50 |
Thierry Carrez |
bug task added |
|
trove/havana |
|
| 2014-07-31 09:21:50 |
Thierry Carrez |
nominated for series |
|
trove/icehouse |
|
| 2014-07-31 09:21:50 |
Thierry Carrez |
bug task added |
|
trove/icehouse |
|
| 2014-07-31 09:22:16 |
Thierry Carrez |
nominated for series |
|
cinder/icehouse |
|
| 2014-07-31 09:22:16 |
Thierry Carrez |
bug task added |
|
cinder/icehouse |
|
| 2014-07-31 09:22:16 |
Thierry Carrez |
nominated for series |
|
cinder/havana |
|
| 2014-07-31 09:22:16 |
Thierry Carrez |
bug task added |
|
cinder/havana |
|
| 2014-07-31 09:25:43 |
Thierry Carrez |
ossa: status |
Confirmed |
Triaged |
|
| 2014-08-06 20:20:46 |
Tracy Jones |
tags |
|
compute |
|
| 2014-08-14 00:34:14 |
Nikhil Manchanda |
bug task deleted |
trove/icehouse |
|
|
| 2014-08-14 00:34:31 |
Nikhil Manchanda |
bug task deleted |
trove/havana |
|
|
| 2014-08-14 00:34:43 |
Nikhil Manchanda |
trove: status |
New |
Triaged |
|
| 2014-08-14 00:34:48 |
Nikhil Manchanda |
trove: importance |
Undecided |
Medium |
|
| 2014-08-21 20:02:57 |
OpenStack Infra |
oslo: status |
In Progress |
Fix Committed |
|
| 2014-08-25 20:41:20 |
OpenStack Infra |
cinder: status |
New |
In Progress |
|
| 2014-08-25 20:41:20 |
OpenStack Infra |
cinder: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-08-25 21:51:23 |
Tracy Jones |
nova: status |
New |
Triaged |
|
| 2014-08-25 21:51:28 |
Tracy Jones |
nova: importance |
Undecided |
Medium |
|
| 2014-08-26 15:46:24 |
OpenStack Infra |
cinder: assignee |
Tristan Cacqueray (tristan-cacqueray) |
Jay Bryant (jsbryant) |
|
| 2014-08-26 18:19:24 |
OpenStack Infra |
nova: status |
Triaged |
In Progress |
|
| 2014-08-26 18:19:24 |
OpenStack Infra |
nova: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-09-05 12:50:52 |
Thierry Carrez |
oslo-incubator: status |
Fix Committed |
Fix Released |
|
| 2014-09-05 12:51:08 |
Thierry Carrez |
oslo-incubator: milestone |
|
juno-3 |
|
| 2014-09-08 16:52:37 |
OpenStack Infra |
nova: assignee |
Tristan Cacqueray (tristan-cacqueray) |
Davanum Srinivas (DIMS) (dims-v) |
|
| 2014-09-09 20:16:47 |
OpenStack Infra |
cinder/havana: status |
New |
In Progress |
|
| 2014-09-09 20:16:47 |
OpenStack Infra |
cinder/havana: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-09-09 20:42:28 |
OpenStack Infra |
cinder/icehouse: status |
New |
In Progress |
|
| 2014-09-09 20:42:28 |
OpenStack Infra |
cinder/icehouse: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-09-12 15:35:22 |
Alan Pevec |
cinder/havana: milestone |
|
2013.2.4 |
|
| 2014-09-12 15:35:28 |
Alan Pevec |
nova/havana: milestone |
|
2013.2.4 |
|
| 2014-09-14 19:22:11 |
OpenStack Infra |
trove: status |
Triaged |
In Progress |
|
| 2014-09-14 19:22:11 |
OpenStack Infra |
trove: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-09-17 22:34:57 |
OpenStack Infra |
cinder/havana: status |
In Progress |
Fix Committed |
|
| 2014-09-22 15:45:54 |
Alan Pevec |
nova/havana: status |
New |
Fix Committed |
|
| 2014-09-22 17:23:27 |
Alan Pevec |
nova/havana: importance |
Undecided |
Medium |
|
| 2014-09-22 17:23:32 |
Alan Pevec |
cinder/havana: importance |
Undecided |
Medium |
|
| 2014-09-22 17:23:48 |
Alan Pevec |
nova/icehouse: importance |
Undecided |
Medium |
|
| 2014-09-22 17:23:53 |
Alan Pevec |
cinder/icehouse: importance |
Undecided |
Medium |
|
| 2014-09-22 17:24:03 |
Alan Pevec |
oslo-incubator: importance |
Undecided |
Medium |
|
| 2014-09-22 17:24:10 |
Alan Pevec |
cinder: importance |
Undecided |
Medium |
|
| 2014-09-22 22:19:26 |
Alan Pevec |
nova/havana: status |
Fix Committed |
Fix Released |
|
| 2014-09-22 22:49:17 |
Alan Pevec |
cinder/havana: status |
Fix Committed |
Fix Released |
|
| 2014-09-25 09:05:31 |
OpenStack Infra |
cinder/icehouse: assignee |
Tristan Cacqueray (tristan-cacqueray) |
Ihar Hrachyshka (ihar-hrachyshka) |
|
| 2014-09-25 10:45:06 |
OpenStack Infra |
cinder/icehouse: status |
In Progress |
Fix Committed |
|
| 2014-09-25 14:40:46 |
Davanum Srinivas (DIMS) |
nova: assignee |
Davanum Srinivas (DIMS) (dims-v) |
|
|
| 2014-09-26 09:21:42 |
Thierry Carrez |
nominated for series |
|
trove/icehouse |
|
| 2014-09-26 09:21:42 |
Thierry Carrez |
bug task added |
|
trove/icehouse |
|
| 2014-09-26 09:21:58 |
Thierry Carrez |
trove/icehouse: status |
New |
Fix Committed |
|
| 2014-09-26 09:24:43 |
Thierry Carrez |
cinder: status |
In Progress |
Fix Committed |
|
| 2014-09-26 09:24:58 |
Thierry Carrez |
nova: status |
In Progress |
Fix Committed |
|
| 2014-09-26 09:33:17 |
Thierry Carrez |
nova/icehouse: status |
New |
In Progress |
|
| 2014-09-28 15:08:07 |
OpenStack Infra |
trove: status |
In Progress |
Fix Committed |
|
| 2014-09-29 14:08:24 |
Thierry Carrez |
nova/icehouse: status |
In Progress |
Fix Committed |
|
| 2014-09-29 19:18:49 |
Adam Gandelman |
cinder/icehouse: milestone |
|
2014.1.3 |
|
| 2014-09-29 20:02:10 |
Adam Gandelman |
nova/icehouse: milestone |
|
2014.1.3 |
|
| 2014-09-29 20:04:02 |
Adam Gandelman |
trove/icehouse: milestone |
|
2014.1.3 |
|
| 2014-10-01 07:30:31 |
Thierry Carrez |
cinder: status |
Fix Committed |
Fix Released |
|
| 2014-10-01 07:30:31 |
Thierry Carrez |
cinder: milestone |
|
juno-rc1 |
|
| 2014-10-01 07:43:22 |
Thierry Carrez |
nova: status |
Fix Committed |
Fix Released |
|
| 2014-10-01 07:43:22 |
Thierry Carrez |
nova: milestone |
|
juno-rc1 |
|
| 2014-10-01 21:30:43 |
Adam Gandelman |
nova/icehouse: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-10-01 21:37:49 |
Adam Gandelman |
trove/icehouse: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
| 2014-10-02 23:40:32 |
Adam Gandelman |
cinder/icehouse: status |
Fix Committed |
Fix Released |
|
| 2014-10-02 23:47:35 |
Adam Gandelman |
nova/icehouse: status |
Fix Committed |
Fix Released |
|
| 2014-10-02 23:48:23 |
Adam Gandelman |
trove/icehouse: status |
Fix Committed |
Fix Released |
|
| 2014-10-03 06:55:24 |
Thierry Carrez |
trove: status |
Fix Committed |
Fix Released |
|
| 2014-10-03 06:55:24 |
Thierry Carrez |
trove: milestone |
|
juno-rc1 |
|
| 2014-10-06 14:56:46 |
Thierry Carrez |
bug task deleted |
ossa |
|
|
| 2014-10-15 15:36:38 |
Tristan Cacqueray |
summary |
Exceptions thrown, and messages logged by execute() may include passwords |
Exceptions thrown, and messages logged by execute() may include passwords (CVE-2014-7230) |
|
| 2014-10-15 15:36:45 |
Tristan Cacqueray |
cve linked |
|
2014-7230 |
|
| 2014-10-16 08:58:27 |
Thierry Carrez |
nova: milestone |
juno-rc1 |
2014.2 |
|
| 2014-10-16 09:19:05 |
Thierry Carrez |
cinder: milestone |
juno-rc1 |
2014.2 |
|
| 2014-10-16 09:49:08 |
Thierry Carrez |
trove: milestone |
juno-rc1 |
2014.2 |
|
| 2014-11-17 17:36:54 |
Launchpad Janitor |
branch linked |
|
lp:~corey.bryant/nova/2014.1.3-0ubuntu2 |
|
| 2014-11-17 19:54:35 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-server-dev/nova/icehouse |
|
