Friday, 2026-10-09

opendevreviewGrzegorz Grasza proposed openstack/security-doc master: OSSN-0109: EC2-derived tokens retain full privileges  https://review.opendev.org/c/openstack/security-doc/+/100239212:19
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: OSSN-0112: EC2-derived tokens retain full privileges  https://review.opendev.org/c/openstack/security-doc/+/100239212:20
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674213:06
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674213:06
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674213:09
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674213:10
xekArtem Goncharov (gtema)^ The OSSNs should be ready to merge (with some adjustements from the cores, like changing the dates)13:13
xekArtem Goncharov (gtema) do you want to do a second review during the reviewathon today?13:14
gtemayeah, we can do it today13:14
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0113: project-scoped admin remains cloud-wide  https://review.opendev.org/c/openstack/security-doc/+/100771915:23
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674215:48
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: Add OSSN-0111: Keystone MFA enforcement gaps and replay weaknesses  https://review.opendev.org/c/openstack/security-doc/+/100674215:51
opendevreviewGrzegorz Grasza proposed openstack/security-doc master: OSSN-0112: EC2-derived tokens retain full privileges  https://review.opendev.org/c/openstack/security-doc/+/100239215:53
xek^ fungiJayF gouthamr We've made final reviews the 3 OSSNs today, I set the dates for today and they are ready for your final approval15:55
JayFhttps://bugs.launchpad.net/ossn/+bug/2170228 is now open17:19
gouthamrxek: sorry, terribly busy to look and publish these... 17:36
fungii was okay doing it on thursday, but trying to spring a bunch of complicated security announcements on our operators late on a friday is less palatable17:40
fungithat said, if someone else has the time to review and wants to approve and announce them, i won't stand in their way17:47
gouthamri commented on 0111 and 0112 proposals. would be okay to re-review monday and see where we get with the suggestions20:17
*** mrunge_ is now known as mrunge23:11

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!