OpenStack Security Advisory

  1. Bug #1411063
  2. Comment #16

Comment 16 for bug 1411063

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: S3token incorrect condition expression for ssl_insecure (CVE-2015-1852)

This is the patch needed for keystoneclient. Besides paths change, the tests needed a minor tweak to work, in the keystoneclient, s3_token use self.verify instead of self._verify.

As it will be shipped with the advance notification, can someone make sure this is correct ?