OpenStack Security Advisory

  1. Bug #1872735
  2. Comment #50

Comment 50 for bug 1872735

Revision history for this message
Thomas Goirand (thomas-goirand) wrote : Re: EC2 and/or credential endpoints are not protected from a scoped context

Hi,

I found that less than 24 hours is a very short timeframe to get things organized:
- patch the distro
- test the patch
- send to the security team
- wait for approval
- upload
- wait for security team ACK of the upload

All of this in a few hours of time (since I got the pre-OSSA yesterday before sleep time) is really too short. I understand the urgency to fix this before the release is out, though we have until Friday for this, so maybe waiting until tomorrow was enough, no?

I'm working on this, hopefully I can catch up before the 1500 UTC deadline...