** Changed in: ossa
Status: In Progress => Fix Committed
** Summary changed:
- image_size_cap not checked in v2 (CVE-2014-5356)
+ [OSSA 2014-028] image_size_cap not checked in v2 (CVE-2014-5356)
** Changed in: ossa
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1315321
Title:
[OSSA 2014-028] image_size_cap not checked in v2 (CVE-2014-5356)
Status in OpenStack Image Registry and Delivery Service (Glance):
Fix Committed
Status in Glance havana series:
Fix Committed
Status in Glance icehouse series:
Fix Committed
Status in OpenStack Security Advisories:
Fix Released
Bug description:
To reproduce (using devstack):
create an image
upload image data larger than image_size_cap
This should result in an error, but doesn't
To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1315321/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
