| *** mrunge_ is now known as mrunge | 00:00 | |
| fungi | https://bugs.launchpad.net/octavia/+bug/2171384 is now public | 13:30 |
|---|---|---|
| fungi | https://bugs.launchpad.net/octavia/+bug/2171382 is now public | 13:33 |
| abhishekk | fungi: o/ regarding https://bugs.launchpad.net/oslo.utils/+bug/2171574 which is now public, I have one question | 13:46 |
| abhishekk | Do we need to blacklist affected versions of oslo.utils? | 13:46 |
| tkajinam | abhishekk, I'm inclined to say we don't have to blacklist/yank these because that is basically just hardening opportunity and does not cause data corruption or leak by/to external users without access to system logs | 13:50 |
| abhishekk | tkajinam: ack, thank you | 13:50 |
| fungi | abhishekk: no, because they still work, operators simply need to be careful not to turn on debug logging or be careful who they grant log access to/send logs to if using luks encryption | 13:50 |
| abhishekk | fungi: ack, makes sense | 13:51 |
| fungi | general guidance has always been to be careful with who you grant service log access to, and especially debug logs, but we try not to stick really sensitive data in debug logs anyway if we can avoid it | 13:52 |
| abhishekk | ack | 13:52 |
| fungi | and yes, https://bugs.launchpad.net/oslo.utils/+bug/2171574 is now public, as you mentioned | 13:52 |
| abhishekk | yep. thanks for the assessment | 13:53 |
| fungi | of course, my pleasure | 13:55 |
| * tkajinam is watching the php2shell mess | 14:02 | |
| fungi | yeah, wiki.openstack.org is also offline for that reason, we took it down ahead of the announcement while we consider our options there | 14:03 |
| tkajinam | I'm hoping it uses php >= 8.2 | 14:05 |
| tkajinam | though it might use distro-version | 14:06 |
| fungi | no, the server has been basically unmaintained for over a decade, we've repeatedly warned the community. several attempts have been started over the years to get it into proper configuration management so we can maintain it going forward, but nobody has yet found sufficient time and interest to ever complete that effort | 14:15 |
| tkajinam | :-( | 14:24 |
| fungi | the good news is that between tonyb and mnasiadka there's recent progress toward running our current (fairly ancient) mediawiki version and currently needed plugins inside a container deployed with ansible, but work is still required to migrate our production data into it and then upgrade the version of mediawiki and plugins in the container image | 14:31 |
| opendevreview | Abhishek Kekane proposed openstack/security-doc master: Add OSSN-0115 for LUKS key logging https://review.opendev.org/c/openstack/security-doc/+/1011668 | 14:53 |
| fungi | https://bugs.launchpad.net/octavia/+bug/2171383 is now public | 16:29 |
| opendevreview | Abhishek Kekane proposed openstack/security-doc master: Add OSSN-0115 for LUKS key logging https://review.opendev.org/c/openstack/security-doc/+/1011668 | 17:54 |
| *** mrunge_ is now known as mrunge | 23:59 | |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!