| opendevreview | Austin Russell proposed openstack/octavia-tempest-plugin master: Add test for LB/amphora failover when vip-subnet is full https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/1005728 | 14:01 |
|---|---|---|
| rm_work | For that OSSA-2026-039 vulnerability… it says “expose other tenant’s TLS keys” but I’m not sure how that’s possible, why would another tenant’s key be on your amphora? 🤔 | 17:18 |
| rm_work | > these flaws can be exploited to execute arbitrary commands as root... (full message at <https://matrix.org/oftc/media/v1/media/download/ATh5BRqIusHkIGrda3t1rRdjH40OKSk2nn0HO6C1hesH-oEAp-7OWIMJy7cJOCKAi0zssEjPKfFgRHedo1InAvdCehDRP4KwAG1hdHJpeC5vcmcvWlRBa1d2SHFJb2NpdmRUUXduRndPWUZO>) | 17:19 |
| rm_work | Heartbeat key yeah, I’m just confused about the other tenants’ private keys comment | 17:20 |
| gthiemonge | rm_work: yeah, I think the reporter considers that an amphora runs multiple LBs from different tenants, which is wrong | 20:55 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!