[Yahoo-eng-team] [Bug 1596135] Re: Make raw_input py3 compatible

2016-06-28 Thread Travis McPeak
** Changed in: bandit Status: New => Invalid ** No longer affects: bandit -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to anvil. https://bugs.launchpad.net/bugs/1596135 Title: Make raw_input py3 compatible Status in an

[Yahoo-eng-team] [Bug 1532086] Re: Use print('value') instead of print 'value' in python3

2016-01-25 Thread Travis McPeak
** Changed in: bandit Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1532086 Title: Use print('value') instead of print 'value' in python3

[Yahoo-eng-team] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests

2015-09-02 Thread Travis McPeak
There isn't anything specific to OpenStack about this. Since we don't really have any good advice other than limiting connections, I'm closing the OSSN for this. Anybody interested should look into "slowloris attacks". ** Changed in: ossn Status: New => Won't Fix -- You received this bu

[Yahoo-eng-team] [Bug 1361360] Re: Eventlet green threads not released back to the pool leading to choking of new requests

2015-07-22 Thread Travis McPeak
Since there is unlikely to ever be a patch for the slowloris side of this, I'm opening an OSSN task. ** Also affects: ossn Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https:

[Yahoo-eng-team] [Bug 1457551] Re: Another Horizon login page vulnerability to a DoS attack

2015-07-09 Thread Travis McPeak
OSSN seems appropriate for this once we have guidance for a proper approach to mitigating this. ** Also affects: ossn Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard

[Yahoo-eng-team] [Bug 1327425] Re: With default configuration Horizon is exposed to session-fixation attack

2014-06-23 Thread Travis McPeak
** Changed in: ossn Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1327425 Title: With default configuration Horizon is e