[Openstack-devel] Please update the security tracker for CVE-2013-4222

Salvatore Bonaccorso carnil at debian.org
Fri Sep 20 09:05:55 UTC 2013


On Fri, Sep 20, 2013 at 11:00:50AM +0200, Salvatore Bonaccorso wrote:
> Hi Thomas,
> 
> On Fri, Sep 20, 2013 at 04:45:16PM +0800, Thomas Goirand wrote:
> > Could you please mark this issue:
> > https://security-tracker.debian.org/tracker/CVE-2013-4222
> > 
> > as fixed in both Sid and Jessie? This was fixed together with the
> > 2013.1.3 release, and Keystone just migrated to Jessie together with
> > sqlalchemy. I am currently unsure of the status in Wheezy, and would
> > appreciate some help if anyone can.
> 
> Have updated the tracker with your information. Thanks!
> 
> From https://bugs.launchpad.net/ossn/%2Bbug/1179955 at a first look it
> might be also present in wheezy, see comment #35. But have not looked
> at it, only a quick overview of the mentined bugreport.

Aehm no, confusion on my side: Essex/2012.1, Folsom/2012.2.

Regards,
Salvatore



More information about the Openstack-devel mailing list