oslo-incubator uses ssl.PROTOCOL_SSLv3 which is removed from Sid
Bug #1395095 reported by
Thomas Goirand
This bug affects 2 people
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| oslo-incubator |
Fix Released
|
Medium
|
stanzgy | ||
Bug Description
There's a few instances of ssl.PROTOCOL_SSLv3 in oslo-incubator. This support has been removed from Python in Debian (Sid, and soon Jessie), because of security issues (probably to avoid any risk of having protocol downgrade issues). All traces of PROTOCOL_SSLv3 should be removed.
Revision history for this message
| Clark Boylan (cboylan) wrote | #1 |
Revision history for this message
| Thomas Goirand (thomas-goirand) wrote | #3 |
| Changed in oslo-incubator: | |
| status: | New → Triaged |
| importance: | Undecided → Medium |
Revision history for this message
| Ben Nemec (bnemec) wrote | #4 |
| Changed in oslo-incubator: | |
| assignee: | nobody → Ben Nemec (bnemec) |
Revision history for this message
| stanzgy (stanzgy) wrote | #5 |
| Changed in oslo-incubator: | |
| assignee: | Ben Nemec (bnemec) → stanzgy (stanzgy) |
| Changed in oslo-incubator: | |
| status: | Triaged → Fix Committed |
Revision history for this message
| ChangBo Guo(gcb) (glongwave) wrote | #6 |
| Changed in oslo-incubator: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
I am a bit confused. This bug is filed against PBR but oslo-incubator appears to be the affected project? Was this just a misfile?