OpenStack Security Advisory

  1. Bug #1506419
  2. Comment #4

Comment 4 for bug 1506419

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic-inspector (stable/liberty)

Reviewed: https://review.openstack.org/235856
Committed: https://git.openstack.org/cgit/openstack/ironic-inspector/commit/?id=2c64da2bee6eeea27c08eb7a94894feaa5494910
Submitter: Jenkins
Branch: stable/liberty

commit 2c64da2bee6eeea27c08eb7a94894feaa5494910
Author: Dmitry Tantsur <email address hidden>
Date: Thu Oct 15 12:51:23 2015 +0200

    Never run Flask application with debug mode

    Flask server in debug mode allows users to execute any Python code
    on a server, which is a security issue for us.

    Change-Id: I9e12510b0abb04182e85bf3f73cdad29e1f8d382
    Closes-Bug: #1506419
    (cherry picked from commit 77d0052c5133034490386fbfadfdb1bdb49aa44f)