Bug#883621: [PKG-Openstack-devel] Bug#883621: CVE-2017-17051 not fixed?

2017-12-07 Thread Salvatore Bonaccorso
Hi Thomas, On Thu, Dec 07, 2017 at 09:45:01AM +0100, Thomas Goirand wrote: > On 12/06/2017 09:34 PM, Salvatore Bonaccorso wrote: > > Hi Thomas, > > > > CVE-2017-17051 was not fixed afaics, only the regression which was > > introduced by OSSA-2017-005. > > > > See

Bug#883621: [PKG-Openstack-devel] Bug#883621: CVE-2017-17051 not fixed?

2017-12-07 Thread Thomas Goirand
On 12/06/2017 09:34 PM, Salvatore Bonaccorso wrote: > Hi Thomas, > > CVE-2017-17051 was not fixed afaics, only the regression which was > introduced by OSSA-2017-005. > > See http://www.openwall.com/lists/oss-security/2017/12/05/5 for > CVE-2017-17051. > > Could you relook? > > Regards, >

Bug#883621: CVE-2017-17051 not fixed?

2017-12-06 Thread Salvatore Bonaccorso
Control: reopen -1 Control: found -1 2:16.0.3-1 Control: forwarded -1 https://launchpad.net/bugs/1732976 Hi Thomas, CVE-2017-17051 was not fixed afaics, only the regression which was introduced by OSSA-2017-005. See http://www.openwall.com/lists/oss-security/2017/12/05/5 for CVE-2017-17051.

Processed: Bug#883621 CVE-2017-17051 not fixed?

2017-12-06 Thread Debian Bug Tracking System
Processing control commands: > reopen -1 Bug #883621 {Done: Thomas Goirand } [src:nova] nova: CVE-2017-17051: Nova FilterScheduler doubles resource allocations during rebuild with new image 'reopen' may be inappropriate when a bug has been closed with a version; all fixed