[Yahoo-eng-team] [Bug 1931558] Re: LFI vulnerability in "Create Workbook"

2022-08-12 Thread Takashi Kajinami
** Changed in: python-mistralclient Status: New => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1931558 Title: LFI vulnerability in "Create

[Yahoo-eng-team] [Bug 1931558] Re: LFI vulnerability in "Create Workbook"

2022-08-12 Thread OpenStack Infra
Reviewed: https://review.opendev.org/c/openstack/mistral-dashboard/+/800952 Committed: https://opendev.org/openstack/mistral-dashboard/commit/8b876b0b22b365f24af1eb9eae01ad3d22cc1533 Submitter: "Zuul (22348)" Branch:master commit 8b876b0b22b365f24af1eb9eae01ad3d22cc1533 Author: Takashi

[Yahoo-eng-team] [Bug 1931558] Re: LFI vulnerability in "Create Workbook"

2021-08-03 Thread Akihiro Motoki
The fix is still partial. Mistral team, can you take care of the progress of the fix? I am a horizon-coresec and horizon-stable-maint but have no power to move this forward. The following is my understanding. Hope it helps you track the progress. - master branch -- A preparation added in