Monday, 2018-10-08

*** dave-mccowan has quit IRC02:30
openstackgerritMerged openstack/security-doc master: fix tox python3 overrides  https://review.openstack.org/60671605:43
*** rcernin has quit IRC07:21
*** abhi89 has joined #openstack-security07:40
openstackgerrit98k proposed openstack/security-doc master: fix tox python3 overrides  https://review.openstack.org/60860408:01
openstackgerritVieri proposed openstack/security-doc master: fix tox python3 overrides  https://review.openstack.org/60860410:00
*** abhi89 has quit IRC10:25
*** jaosorior has joined #openstack-security10:26
*** rcernin has joined #openstack-security10:35
*** Luzi has joined #openstack-security10:46
*** dave-mccowan has joined #openstack-security10:47
*** rcernin has quit IRC11:17
*** abhi89 has joined #openstack-security13:30
*** jaosorior has quit IRC13:39
abhi89fungi: Hi Jeremy.. I see that https://bugs.launchpad.net/neutron/+bug/1734320 this vulnerability (not a OSSA yet, but a possible one) is not yet fixed.. are there any plans on this to fix in near future?13:43
openstackLaunchpad bug 1734320 in os-vif "Eavesdropping private traffic" [Undecided,In progress] - Assigned to sean mooney (sean-k-mooney)13:43
abhi89fungi: i saw in the comment section of the defect that, once the fix is finalized for all supported releases, this class B2 OSSN may be converted to OSSA as well..13:46
*** munimeha1 has joined #openstack-security14:09
*** Emine has joined #openstack-security14:49
*** Luzi has quit IRC15:17
*** Emine has quit IRC15:21
fungiabhi89: it looks like work is progressing in os-vif and nova master branches less than a month ago, though the nova patch is still in need of some work. if a solution is achieved _and_ if it can be backported to all supported stable branches then the openstack vmt will issue an advisory for nova/neutron as appropriate. if you're interested in helping with it i suggest trying to engage with the15:32
fungipatch author and nova reviewers on getting it working15:32
abhi89fungi: thanks for the update.. would love to help, but i am not a neutron guy.. i work on openstack keystone & on providing security fixes to cusotmers..15:41
fungiabhi89: i was also just talking to sean-k-mooney about it, seems like maybe the os-vif patch may be sufficient to fix the bug, but more discussion is needed15:51
*** sean-k-mooney has joined #openstack-security16:02
*** gyee has joined #openstack-security16:48
*** abhi89 has quit IRC16:55
*** pcaruana has quit IRC20:49
*** mdong has joined #openstack-security21:10
*** dave-mccowan has quit IRC22:49
*** munimeha1 has quit IRC22:50
*** rcernin has joined #openstack-security22:50
*** dave-mccowan has joined #openstack-security22:50
*** mdong has left #openstack-security22:50
*** gyee has quit IRC23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!