)]}'
{"security-notes/OSSN-0058":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"68e15da7c7b76503325e3cbe7ca5d3ef2f581e38","unresolved":false,"context_lines":[{"line_number":38,"context_line":"User names will be found in the `Account information:` section."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"### Recommended Actions ###"},{"line_number":41,"context_line":"If possible, Cinder should be updated to the stable Juno release. If"},{"line_number":42,"context_line":"this is not an option, then restricting access to port 3260 will"},{"line_number":43,"context_line":"prevent iscsi traffic to affected nodes."},{"line_number":44,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":3,"id":"da20952f_b7f2f198","line":41,"updated":"2015-09-03 16:39:56.000000000","message":"Should we say Juno or newer?","commit_id":"5265b67ef4e80f73f3809ef440542b3b0d48265b"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"68e15da7c7b76503325e3cbe7ca5d3ef2f581e38","unresolved":false,"context_lines":[{"line_number":40,"context_line":"### Recommended Actions ###"},{"line_number":41,"context_line":"If possible, Cinder should be updated to the stable Juno release. If"},{"line_number":42,"context_line":"this is not an option, then restricting access to port 3260 will"},{"line_number":43,"context_line":"prevent iscsi traffic to affected nodes."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"### Contacts / References ###"},{"line_number":46,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0058"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"da20952f_8a1b0080","line":43,"updated":"2015-09-03 16:39:56.000000000","message":"This seems a bit absolute - is there an alternate driver that allows iscsi or something? The iptables rules for known hosts that can attach are a good idea as well.","commit_id":"5265b67ef4e80f73f3809ef440542b3b0d48265b"}]}