OpenStack Security Advisory

  1. Bug #1242597
  2. Comment #45

Comment 45 for bug 1242597

Revision history for this message
Adam Gandelman (gandelman-a) wrote :

Did a bit more digging... Steven's right, looks like an issue using older version of keystoneclient. With https://review.openstack.org/#/c/48462/ applied against our 0.3.2 package, tests run again. The patch didn't release with keystoneclient until 0.4.1

@Steven
Is the keystones requirements' "python-keystoneclient>=0.3.2" entry correct, or does it need to be updated to >=0.4.1? In other words, is this just an issue for the test suite or is keystone still vulnerable if using an older client library?

Thanks,
Adam