)]}'
{"security-notes/OSSN-0001":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":37,"context_line":"guests. Even with appropriate AppArmour policies applied."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"### Contacts / References ###"},{"line_number":40,"context_line":"Author: Unknown"},{"line_number":41,"context_line":"Nova : http://docs.openstack.org/developer/nova/"},{"line_number":42,"context_line":"LXC : http://lxc.sourceforge.net/"},{"line_number":43,"context_line":"Libvirt : http://libvirt.org/"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_a32e3ca2","line":40,"updated":"2016-07-07 18:09:09.000000000","message":"According to git blame. Nathan Kinder did this one.","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":37,"context_line":"guests. Even with appropriate AppArmour policies applied."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"### Contacts / References ###"},{"line_number":40,"context_line":"Author: Unknown"},{"line_number":41,"context_line":"Nova : http://docs.openstack.org/developer/nova/"},{"line_number":42,"context_line":"LXC : http://lxc.sourceforge.net/"},{"line_number":43,"context_line":"Libvirt : http://libvirt.org/"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_66c0c67d","line":40,"in_reply_to":"1aa78d24_a32e3ca2","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0012":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":66,"context_line":"other credentials that may have been communicated over SSL/TLS."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"### Contacts / References ###"},{"line_number":69,"context_line":"Author: Unknown"},{"line_number":70,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0012"},{"line_number":71,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":72,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_0314704a","line":69,"updated":"2016-07-07 18:09:09.000000000","message":"git blame \u003d nkinder.","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":66,"context_line":"other credentials that may have been communicated over SSL/TLS."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"### Contacts / References ###"},{"line_number":69,"context_line":"Author: Unknown"},{"line_number":70,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0012"},{"line_number":71,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":72,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_26451e17","line":69,"in_reply_to":"1aa78d24_0314704a","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0017":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":84,"context_line":"user for as long as their session is valid."},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"### Contacts / References ###"},{"line_number":87,"context_line":"Author: Travis McPeak, IBM"},{"line_number":88,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0017"},{"line_number":89,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/horizon/+bug/1327425"},{"line_number":90,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_1d984d69","line":87,"updated":"2016-07-07 17:15:40.000000000","message":"Travis McPeak, Symantec","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":84,"context_line":"user for as long as their session is valid."},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"### Contacts / References ###"},{"line_number":87,"context_line":"Author: Travis McPeak, IBM"},{"line_number":88,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0017"},{"line_number":89,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/horizon/+bug/1327425"},{"line_number":90,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_e66156aa","line":87,"in_reply_to":"1aa78d24_1d984d69","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0020":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":53,"context_line":"version of Neutron."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"### Contacts / References ###"},{"line_number":56,"context_line":"Author: Priti Desai, IBM"},{"line_number":57,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0020"},{"line_number":58,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/neutron/+bug/1334926"},{"line_number":59,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_1dafad7d","line":56,"updated":"2016-07-07 17:15:40.000000000","message":"Priti Desai, Symantec","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":53,"context_line":"version of Neutron."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"### Contacts / References ###"},{"line_number":56,"context_line":"Author: Priti Desai, IBM"},{"line_number":57,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0020"},{"line_number":58,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/neutron/+bug/1334926"},{"line_number":59,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_060462c4","line":56,"in_reply_to":"1aa78d24_1dafad7d","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0021":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":63,"context_line":"convenient method of accessing and updating this information."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"### Contacts / References ###"},{"line_number":66,"context_line":"Author: Stanislaw Pitucha, HP"},{"line_number":67,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0021"},{"line_number":68,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1341849"},{"line_number":69,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_be048f14","line":66,"updated":"2016-07-07 18:09:09.000000000","message":"Should be HPE","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":63,"context_line":"convenient method of accessing and updating this information."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"### Contacts / References ###"},{"line_number":66,"context_line":"Author: Stanislaw Pitucha, HP"},{"line_number":67,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0021"},{"line_number":68,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1341849"},{"line_number":69,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_661c4614","line":66,"in_reply_to":"1aa78d24_be048f14","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0025":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":62,"context_line":"production environment."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"### Contacts / References ###"},{"line_number":65,"context_line":"Author: N Dillon, HPE"},{"line_number":66,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0025"},{"line_number":67,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/glance/+bug/1354512"},{"line_number":68,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_3e11bf52","line":65,"updated":"2016-07-07 18:09:09.000000000","message":"Nathaniel","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":62,"context_line":"production environment."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"### Contacts / References ###"},{"line_number":65,"context_line":"Author: N Dillon, HPE"},{"line_number":66,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0025"},{"line_number":67,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/glance/+bug/1354512"},{"line_number":68,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_46b30a0b","line":65,"in_reply_to":"1aa78d24_3e11bf52","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0026":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":50,"context_line":"malicious users to view sensitive data (read access)."},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"### Contacts / References ###"},{"line_number":53,"context_line":"Author: Travis McPeak, IBM"},{"line_number":54,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0026"},{"line_number":55,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1343657"},{"line_number":56,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_9df1dd97","line":53,"updated":"2016-07-07 17:15:40.000000000","message":"Travis McPeak, HPE","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":50,"context_line":"malicious users to view sensitive data (read access)."},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"### Contacts / References ###"},{"line_number":53,"context_line":"Author: Travis McPeak, IBM"},{"line_number":54,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0026"},{"line_number":55,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1343657"},{"line_number":56,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_a6c46e5f","line":53,"in_reply_to":"1aa78d24_9df1dd97","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0037":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"e67ced51d97ebd165ef0ed744aa94f65db7a11ba","unresolved":false,"context_lines":[{"line_number":36,"context_line":"  http://wiki.nginx.org/HttpGzipModule"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"### Contacts / References ###"},{"line_number":39,"context_line":"Author: Robert Clark, IBM"},{"line_number":40,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0037"},{"line_number":41,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1209250"},{"line_number":42,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"1aa78d24_d8595737","line":39,"range":{"start_line":39,"start_character":8,"end_line":39,"end_character":25},"updated":"2016-07-10 02:26:05.000000000","message":"I don\u0027t think Rob worked at IBM at the time.","commit_id":"cf856d4f633158555891680d3ee841e2439fbcff"}],"security-notes/OSSN-0039":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"### Contacts / References ###"},{"line_number":136,"context_line":"Author: Bryan D. Payne, Netflix"},{"line_number":137,"context_line":"This OSSN: https://wiki.openstack.org/wiki/OSSN/OSSN-0039"},{"line_number":138,"context_line":"Original Launchpad Bug: https://bugs.launchpad.net/ossn/+bug/1382270"},{"line_number":139,"context_line":"OpenStack Security ML: openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_dd1405a1","line":136,"updated":"2016-07-07 17:15:40.000000000","message":"Bryan D. Payne, Nebula","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"### Contacts / References ###"},{"line_number":136,"context_line":"Author: Bryan D. Payne, Netflix"},{"line_number":137,"context_line":"This OSSN: https://wiki.openstack.org/wiki/OSSN/OSSN-0039"},{"line_number":138,"context_line":"Original Launchpad Bug: https://bugs.launchpad.net/ossn/+bug/1382270"},{"line_number":139,"context_line":"OpenStack Security ML: openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_6691e652","line":136,"in_reply_to":"1aa78d24_dd1405a1","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0045":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":72,"context_line":"provided below in the section: \"Resources for configuring TLS options\"."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"### Contacts / References ###"},{"line_number":75,"context_line":"Author: Unknown"},{"line_number":76,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0045"},{"line_number":77,"context_line":"Original LaunchPad Bug : N/A"},{"line_number":78,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_5d70150b","line":75,"updated":"2016-07-07 17:15:40.000000000","message":"Travis McPeak, HPE","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":72,"context_line":"provided below in the section: \"Resources for configuring TLS options\"."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"### Contacts / References ###"},{"line_number":75,"context_line":"Author: Unknown"},{"line_number":76,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0045"},{"line_number":77,"context_line":"Original LaunchPad Bug : N/A"},{"line_number":78,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_a672ae47","line":75,"in_reply_to":"1aa78d24_5d70150b","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0052":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":31,"context_line":"    debug \u003d false"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"### Contacts / References ###"},{"line_number":34,"context_line":"Author: N Dillon, HPE"},{"line_number":35,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0052"},{"line_number":36,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/python-swiftclient/+bug/1470740"},{"line_number":37,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_3e389fd2","line":34,"updated":"2016-07-07 18:09:09.000000000","message":"Nathaniel","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":31,"context_line":"    debug \u003d false"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"### Contacts / References ###"},{"line_number":34,"context_line":"Author: N Dillon, HPE"},{"line_number":35,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0052"},{"line_number":36,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/python-swiftclient/+bug/1470740"},{"line_number":37,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_c6ac1a8f","line":34,"in_reply_to":"1aa78d24_3e389fd2","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0055":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":50,"context_line":"service account."},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"### Contacts / References ###"},{"line_number":53,"context_line":"Author: Travis McPeak, IBM"},{"line_number":54,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0055"},{"line_number":55,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1464750"},{"line_number":56,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_5d577557","line":53,"updated":"2016-07-07 17:15:40.000000000","message":"Travis McPeak, HPE and Brant Knudson, IBM","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":50,"context_line":"service account."},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"### Contacts / References ###"},{"line_number":53,"context_line":"Author: Travis McPeak, IBM"},{"line_number":54,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0055"},{"line_number":55,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1464750"},{"line_number":56,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_a6c0ee2b","line":53,"in_reply_to":"1aa78d24_5d577557","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0056":[{"author":{"_account_id":7473,"name":"Grant Murphy","email":"grantcmurphy@gmail.com","username":"gm"},"change_message_id":"e0a6a917c1c0d1875250a6bed49cdb46b704b205","unresolved":false,"context_lines":[{"line_number":43,"context_line":"attack window or disable token caching entirely."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"### Contacts / References ###"},{"line_number":46,"context_line":"Author: Unknown"},{"line_number":47,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0056"},{"line_number":48,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/python-keystoneclient/+bug/1287301"},{"line_number":49,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_bea00ff5","line":46,"updated":"2016-07-07 18:09:09.000000000","message":"Shellee Arnold (HPE), Co Authored by Dough Chivers (HPE)","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":43,"context_line":"attack window or disable token caching entirely."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"### Contacts / References ###"},{"line_number":46,"context_line":"Author: Unknown"},{"line_number":47,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0056"},{"line_number":48,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/python-keystoneclient/+bug/1287301"},{"line_number":49,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_26399e42","line":46,"in_reply_to":"1aa78d24_bea00ff5","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0057":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"26c1d2b3829f0a962377022a9209e15680b76dbd","unresolved":false,"context_lines":[{"line_number":49,"context_line":"---- end example glance-api.log snippet ----"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"### Contacts / References ###"},{"line_number":52,"context_line":"Author: Eric Brown, VMWare"},{"line_number":53,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0057"},{"line_number":54,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1401170"},{"line_number":55,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_bd8db932","line":52,"range":{"start_line":52,"start_character":20,"end_line":52,"end_character":26},"updated":"2016-07-07 17:06:45.000000000","message":"VMware not VMWare.  common mistake","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":49,"context_line":"---- end example glance-api.log snippet ----"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"### Contacts / References ###"},{"line_number":52,"context_line":"Author: Eric Brown, VMWare"},{"line_number":53,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0057"},{"line_number":54,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1401170"},{"line_number":55,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_26f7def6","line":52,"range":{"start_line":52,"start_character":20,"end_line":52,"end_character":26},"in_reply_to":"1aa78d24_bd8db932","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}],"security-notes/OSSN-0060":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"b83374c660998e55459fd2e7833608f4e16c9267","unresolved":false,"context_lines":[{"line_number":43,"context_line":"at the default setting (`True`) or commented out."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"### Contacts / References ###"},{"line_number":46,"context_line":"Author: Travis McPeak, IBM"},{"line_number":47,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0060"},{"line_number":48,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/glance/+bug/1493448"},{"line_number":49,"context_line":"OpenStack Security Documentation : https://security.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_7df6b15d","line":46,"updated":"2016-07-07 17:15:40.000000000","message":"Travis McPeak, HPE","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"5f16fd6c1eef4074d5b8b5cc9327f0c0cb52f4d6","unresolved":false,"context_lines":[{"line_number":43,"context_line":"at the default setting (`True`) or commented out."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"### Contacts / References ###"},{"line_number":46,"context_line":"Author: Travis McPeak, IBM"},{"line_number":47,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0060"},{"line_number":48,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/glance/+bug/1493448"},{"line_number":49,"context_line":"OpenStack Security Documentation : https://security.openstack.org"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1aa78d24_460b0a7e","line":46,"in_reply_to":"1aa78d24_7df6b15d","updated":"2016-07-08 08:11:03.000000000","message":"Done","commit_id":"68c91fd9d4adca1dbdb67c9d93800a50eb6aa418"}]}