2014-05-29 15:47:14 |
Steven Hardy |
bug |
|
|
added bug |
2014-05-29 15:47:14 |
Steven Hardy |
attachment added |
|
Reproducer script https://bugs.launchpad.net/bugs/1324592/+attachment/4122312/+files/chained_example3.py |
|
2014-05-29 15:48:53 |
Steven Hardy |
bug |
|
|
added subscriber Garth Mollett |
2014-05-29 15:49:09 |
Steven Hardy |
summary |
Trust scope can be circumvented by chaining trustts |
Trust scope can be circumvented by chaining trusts |
|
2014-05-29 15:49:19 |
Steven Hardy |
removed subscriber Garth Mollett |
|
|
|
2014-05-29 15:49:27 |
Steven Hardy |
bug |
|
|
added subscriber Garth Mollett |
2014-05-29 15:59:15 |
Tristan Cacqueray |
bug task added |
|
ossa |
|
2014-05-29 15:59:29 |
Tristan Cacqueray |
ossa: status |
New |
Incomplete |
|
2014-05-29 16:05:21 |
Tristan Cacqueray |
bug |
|
|
added subscriber Keystone Core security contacts |
2014-05-29 16:20:10 |
Dolph Mathews |
keystone: importance |
Undecided |
Critical |
|
2014-05-29 16:31:14 |
Steven Hardy |
bug |
|
|
added subscriber Angus Salkeld |
2014-05-29 17:04:45 |
Adam Young |
keystone: assignee |
|
Adam Young (ayoung) |
|
2014-05-29 17:59:35 |
Adam Young |
attachment added |
|
keystone-ayoung-0010-Forbid-creating-a-trust-with-a-trust-token.patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4122339/+files/keystone-ayoung-0010-Forbid-creating-a-trust-with-a-trust-token.patch |
|
2014-05-29 19:23:33 |
Adam Young |
attachment added |
|
keystone-ayoung-0010-2-Forbid-creating-a-trust-with-a-trust-token.patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4122351/+files/keystone-ayoung-0010-2-Forbid-creating-a-trust-with-a-trust-token.patch |
|
2014-05-30 14:28:16 |
Steven Hardy |
bug |
|
|
added subscriber Thomas Herve |
2014-05-30 15:22:37 |
Thierry Carrez |
ossa: status |
Incomplete |
Confirmed |
|
2014-05-30 15:22:39 |
Thierry Carrez |
ossa: importance |
Undecided |
High |
|
2014-05-30 19:52:03 |
Adam Young |
bug |
|
|
added subscriber Nathan Kinder |
2014-05-30 20:57:44 |
Adam Young |
attachment added |
|
keystone-ayoung-0011-Block-Delegation-esclation-of-Priveledges.patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4123127/+files/keystone-ayoung-0011-Block-Delegation-esclation-of-Priveledges.patch |
|
2014-05-31 20:39:25 |
Morgan Fainberg |
keystone: status |
New |
In Progress |
|
2014-06-02 18:53:28 |
Adam Young |
attachment added |
|
Updated patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4124299/+files/keystone-ayoung-0013-Block-delegation-escalation-of-privilege.patch |
|
2014-06-02 20:23:07 |
Adam Young |
attachment added |
|
keystone-ayoung-icehouse-Block-delegation-escalation-of-privilege.patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4124372/+files/keystone-ayoung-icehouse-Block-delegation-escalation-of-privilege.patch |
|
2014-06-02 20:50:38 |
Adam Young |
attachment added |
|
keystone-ayoung-0013-1-Block-delegation-escalation-of-privilege.patch https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4124386/+files/keystone-ayoung-0013-1-Block-delegation-escalation-of-privilege.patch |
|
2014-06-02 21:09:57 |
Adam Young |
attachment added |
|
Backport for Icehouse https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4124397/+files/keystone-ayoung-icehouse-2-Block-delegation-escalation-of-privilege.patch |
|
2014-06-03 02:05:34 |
Adam Young |
attachment added |
|
Backport to Havana https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4124479/+files/keystone-ayoung-Havana-1-Block-delegation-escalation-of-privilege.patch |
|
2014-06-03 20:52:32 |
Tristan Cacqueray |
ossa: assignee |
|
Tristan Cacqueray (tristan-cacqueray) |
|
2014-06-04 00:30:24 |
Garth Mollett |
cve linked |
|
2014-3476 |
|
2014-06-04 00:51:12 |
Grant Murphy |
summary |
Trust scope can be circumvented by chaining trusts |
Trust scope can be circumvented by chaining trusts (CVE-2014-3476) |
|
2014-06-04 02:59:17 |
Adam Young |
attachment added |
|
Patch for Havana https://bugs.launchpad.net/keystone/+bug/1324592/+attachment/4125102/+files/keystone-ayoung-Hava-3-Block-delegation-escalation-of-privilege.patch |
|
2014-06-09 14:29:31 |
Thierry Carrez |
ossa: status |
Confirmed |
In Progress |
|
2014-06-09 15:22:54 |
Tristan Cacqueray |
ossa: status |
In Progress |
Fix Committed |
|
2014-06-12 15:05:43 |
Tristan Cacqueray |
information type |
Private Security |
Public Security |
|
2014-06-12 15:08:33 |
Tristan Cacqueray |
summary |
Trust scope can be circumvented by chaining trusts (CVE-2014-3476) |
[OSSA 2014-018] Trust scope can be circumvented by chaining trusts (CVE-2014-3476) |
|
2014-06-13 00:59:07 |
Alan Pevec |
nominated for series |
|
keystone/icehouse |
|
2014-06-13 00:59:07 |
Alan Pevec |
bug task added |
|
keystone/icehouse |
|
2014-06-13 00:59:07 |
Alan Pevec |
nominated for series |
|
keystone/havana |
|
2014-06-13 00:59:07 |
Alan Pevec |
bug task added |
|
keystone/havana |
|
2014-06-13 00:59:18 |
Alan Pevec |
keystone/havana: status |
New |
In Progress |
|
2014-06-13 00:59:23 |
Alan Pevec |
keystone/icehouse: status |
New |
In Progress |
|
2014-06-13 00:59:26 |
Alan Pevec |
keystone/havana: importance |
Undecided |
Critical |
|
2014-06-13 00:59:29 |
Alan Pevec |
keystone/icehouse: importance |
Undecided |
Critical |
|
2014-06-13 00:59:33 |
Alan Pevec |
keystone/havana: assignee |
|
Adam Young (ayoung) |
|
2014-06-13 00:59:39 |
Alan Pevec |
keystone/icehouse: assignee |
|
Adam Young (ayoung) |
|
2014-06-13 10:21:31 |
OpenStack Infra |
keystone: status |
In Progress |
Fix Committed |
|
2014-06-13 11:42:41 |
OpenStack Infra |
keystone/icehouse: status |
In Progress |
Fix Committed |
|
2014-06-13 11:45:47 |
OpenStack Infra |
keystone/havana: status |
In Progress |
Fix Committed |
|
2014-06-16 14:04:02 |
Tristan Cacqueray |
ossa: status |
Fix Committed |
Fix Released |
|
2014-07-14 23:23:20 |
Priti Desai |
bug |
|
|
added subscriber Priti Desai |
2014-07-24 12:10:47 |
Russell Bryant |
keystone: status |
Fix Committed |
Fix Released |
|
2014-07-24 12:10:47 |
Russell Bryant |
keystone: milestone |
|
juno-2 |
|
2014-08-07 01:36:25 |
Chuck Short |
keystone/icehouse: milestone |
|
2014.1.2 |
|
2014-08-07 01:36:41 |
Chuck Short |
tags |
|
in-stable-icehouse |
|
2014-08-07 19:31:43 |
Chuck Short |
keystone/icehouse: status |
Fix Committed |
Fix Released |
|
2014-09-22 21:07:16 |
Alan Pevec |
keystone/havana: milestone |
|
2013.2.4 |
|
2014-09-22 22:24:20 |
Alan Pevec |
keystone/havana: status |
Fix Committed |
Fix Released |
|
2014-10-16 08:17:55 |
Thierry Carrez |
keystone: milestone |
juno-2 |
2014.2 |
|