[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-03-04 Thread Edward Hope-Morley
** Tags removed: sts-sru-needed ** Tags added: sts-sru-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU] ceilometer writing snmp credentials to log file To manage

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-26 Thread Corey Bryant
This bug was fixed in the package ceilometer - 1:10.0.1-0ubuntu0.18.04.2~cloud0 --- ceilometer (1:10.0.1-0ubuntu0.18.04.2~cloud0) xenial-queens; urgency=medium . * New update for the Ubuntu Cloud Archive. . ceilometer (1:10.0.1-0ubuntu0.18.04.2) bionic; urgency=medium . *

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-26 Thread Edward Hope-Morley
queens-proposed verified using [Test Case]. ** Tags removed: verification-queens-needed ** Tags added: verification-queens-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU]

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-25 Thread Corey Bryant
This bug was fixed in the package ceilometer - 1:11.0.1-0ubuntu2~cloud0 --- ceilometer (1:11.0.1-0ubuntu2~cloud0) bionic-rocky; urgency=medium . * New update for the Ubuntu Cloud Archive. . ceilometer (1:11.0.1-0ubuntu2) cosmic; urgency=medium . * Backport fix to only log

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-25 Thread Corey Bryant
** Changed in: cloud-archive/stein Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU] ceilometer writing snmp credentials to log file To

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-18 Thread Launchpad Bug Tracker
This bug was fixed in the package ceilometer - 1:10.0.1-0ubuntu0.18.04.2 --- ceilometer (1:10.0.1-0ubuntu0.18.04.2) bionic; urgency=medium * Backport fix to only log polling.yaml contents as DEBUG (LP: #1811098) - d/p/Only-print-polling.yaml-file-contents-as-DEBUG.patch --

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-14 Thread Nick Tait
This flaw has been assigned as CVE-2019-3830 https://access.redhat.com/security/cve/cve-2019-3830 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-3830 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-11 Thread Launchpad Bug Tracker
This bug was fixed in the package ceilometer - 1:11.0.1-0ubuntu2 --- ceilometer (1:11.0.1-0ubuntu2) cosmic; urgency=medium * Backport fix to only log polling.yaml contents as DEBUG (LP: #1811098) - d/p/Only-print-polling.yaml-file-contents-as-DEBUG.patch -- Edward Hope-Morley

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-06 Thread Jeremy Stanley
A CVE can be requested by anyone for any defect. The OpenStack VMT doesn't generally request CVEs for projects it doesn't oversee, but we have a brief overview of what we'd generally recommend putting in MITRE's CVE Request form documented at https://security.openstack.org

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-06 Thread Nick Tait
I agree with VMT's rating of class A. Will a CVE be requested for this? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU] ceilometer writing snmp credentials to log file To manage

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-06 Thread Edward Hope-Morley
rocky-proposed verified using [Test Case]. ** Tags removed: verification-needed verification-rocky-needed ** Tags added: verification-done verification-rocky-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-06 Thread Edward Hope-Morley
bionic-proposed verified using [Test Case]. ** Tags removed: verification-needed-bionic ** Tags added: verification-done-bionic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU]

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-02-05 Thread Edward Hope-Morley
cosmic-proposed verified using [Test Case]. ** Tags removed: verification-needed-cosmic ** Tags added: verification-done-cosmic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1811098 Title: [SRU]

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-01-31 Thread Brian Murray
Hello Edward, or anyone else affected, Accepted ceilometer into cosmic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/ceilometer/1:11.0.1-0ubuntu2 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-01-16 Thread Corey Bryant
Note there is a public fix proposed for this issue. ** Also affects: cloud-archive/queens Importance: Undecided Status: New ** Also affects: cloud-archive/rocky Importance: Undecided Status: New ** Also affects: cloud-archive/stein Importance: Undecided Status: New

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-01-16 Thread Edward Hope-Morley
** Description changed: + [Impact] + This SRU proposal is to patch the Ubuntu ceilometer package so that the ceilometer-agent switches printing the contents of polling.yaml from INFO to DEBUG. This is mostly an interim fix to make it easy to stop the presence of sensitive data in the

[Bug 1811098] Re: [SRU] ceilometer writing snmp credentials to log file

2019-01-11 Thread Ubuntu Foundations Team Bug Bot
The attachment "lp1811098-stein.debdiff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag,