tripleo

  1. Bug #1754607
  2. Comment #13

Comment 13 for bug 1754607

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to instack-undercloud (stable/newton)

Reviewed: https://review.openstack.org/551393
Committed: https://git.openstack.org/cgit/openstack/instack-undercloud/commit/?id=236d9f31bdae078d08d637c6be575f50528492c0
Submitter: Zuul
Branch: stable/newton

commit 236d9f31bdae078d08d637c6be575f50528492c0
Author: Emilien Macchi <email address hidden>
Date: Fri Mar 9 19:55:13 2018 +0100

    [CVE-2018-1000115] memcached: restrict to TCP & localhost

    https://access.redhat.com/security/cve/cve-2018-1000115

    Restrict Memcached to only work on TCP and localhost.
    The restriction is made at the application and firewall levels.
    It will prevent DDoS amplification attacks using memcached.

    Change-Id: I8072cc842291d133fde9fdfe9e8ad432623a8ef2
    Related-Bug: #1754607
    (cherry picked from commit 74fc85c507fc298828797c51255cee059a9684fc)