Your message dated Tue, 14 Jun 2011 11:47:23 +
with message-id e1qws5b-0006p3...@franck.debian.org
and subject line Bug#598463: fixed in libcloud 0.5.0-1
has caused the Debian Bug report #598463,
regarding python-libcloud: libcloud https connections are not secured against
mitm attacks
Hi all,
Apache Libcloud 0.4.2 is now available for public consumption:
- http://incubator.apache.org/libcloud/downloads.html
- http://pypi.python.org/pypi/apache-libcloud/0.4.2
This release begins to address the SSL issue as mentioned previously.
Thanks,
Jerry
--
To UNSUBSCRIBE, email to
Hi all,
We have recently implemented SSL verification capability in libcloud 0.4.1-dev
(slated for release this week).
For more information: http://wiki.apache.org/incubator/LibcloudSSL
The default setting of VERIFY_SSL_CERT=False emits a UserWarning when an SSL
connection is first attempted,
Never-mind, there has already been a potential patch emailed in that
thread (that Soren linked to).
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
On Fri, Nov 12, 2010 at 05:10:11PM +0100, Pietro Battiston wrote:
Il giorno ven, 12/11/2010 alle 13.46 +0100, Moritz Muehlenhoff ha
scritto:
On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote:
I didn't forget this, it's just harder than I thought, in particular
considering
On 08/12/2010 21:57, Moritz Muehlenhoff wrote:
[ Adding debian-release to CC, please remove libcloud from testing for now ]
Removal hint added.
Cheers,
--
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of
Hi.
I'm the maintainer. I'll readily admit I've failed miserably to
track this issue appropriately.
Part of it is due to some rather unfortunate e-mail filtering, but
that's certainly not all. (Debian bug mail ended in a folder I didn't
subscribe to, but I noticed the issue when it was first
Um, well I could see if they would accept a patch I could make up soon...
The problem is / was they closed the bug saying it was a python issue,
where they didnt' even attempt to ensure that a https connection would
be secured, through wrapping it in ssl, iirc.
--
To UNSUBSCRIBE, email to
On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote:
I didn't forget this, it's just harder than I thought, in particular
considering I have no cloud computing experience and account.
I'm still committed to fix it (and also asked for help upstream), but
have no precise idea of
Il giorno ven, 12/11/2010 alle 13.46 +0100, Moritz Muehlenhoff ha
scritto:
On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote:
I didn't forget this, it's just harder than I thought, in particular
considering I have no cloud computing experience and account.
I'm still
I didn't forget this, it's just harder than I thought, in particular
considering I have no cloud computing experience and account.
I'm still committed to fix it (and also asked for help upstream), but
have no precise idea of the time it will take. In particular, any help
is appreciated.
Pietro
On Thu, Oct 21, 2010 at 09:57:50AM +0200, Pietro Battiston wrote:
I wrote Soren 8 days ago informing him that I could take of that.
I'll soon submit a patch.
What's the status?
Cheers,
Moritz
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of
Il giorno dom, 31/10/2010 alle 21.01 +0100, Moritz Muehlenhoff ha
scritto:
On Thu, Oct 21, 2010 at 09:57:50AM +0200, Pietro Battiston wrote:
I wrote Soren 8 days ago informing him that I could take of that.
I'll soon submit a patch.
What's the status?
That I'll soon submit a patch.
I wrote Soren 8 days ago informing him that I could take of that.
I'll soon submit a patch.
Pietro
signature.asc
Description: This is a digitally signed message part
Package: python-libcloud
Severity: grave
Tags: security
Justification: user security hole
libcloud fails to perform ssl validation on https connections.
This means that users of this module, who which perform api requests using
https urls / connections are at risk to mitm attacks.
See
15 matches
Mail list logo
