)]}'
{"security-notes/OSSN-0078":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"0f6eede99c969b0d90cd23c1ea7ecbde1a3fd15d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Copy_from in api v1 allows network port scan"},{"line_number":2,"context_line":"--------------------------------------------"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_e3da8de7","line":1,"range":{"start_line":1,"start_character":13,"end_line":1,"end_character":19},"updated":"2017-03-09 15:34:41.000000000","message":"Should probably mention which API here (\"Image Service API version 1\"), or is that info supplied by the context in which this note will appear?","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"0f6eede99c969b0d90cd23c1ea7ecbde1a3fd15d","unresolved":false,"context_lines":[{"line_number":2,"context_line":"--------------------------------------------"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"`copy_from`  feature in Glance v1 API can allow an attacker to perform masked"},{"line_number":6,"context_line":"network port scans."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"### Affected Services / Software ###"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_e3252d09","line":5,"updated":"2017-03-09 15:34:41.000000000","message":"Technically, it\u0027s the \"Image Service API v1 supplied by Glance\", but I don\u0027t know how pedantic we need to be here.  We should probably stick with however you usually refer to the Image API in these notes.","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"c75ad90c30308f016bbfa3ec68147768ab2cd800","unresolved":false,"context_lines":[{"line_number":6,"context_line":"network port scans."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"### Affected Services / Software ###"},{"line_number":9,"context_line":"v1 of the Glance API  (deprecated in Newton)."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Discussion ###"},{"line_number":12,"context_line":"In v1 of the Glance API it is possible to create images with a URL such as"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_f7bfb0a7","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":44},"updated":"2017-03-09 11:41:37.000000000","message":"could a glance core confirm if this statement is correct?","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"4849549c59ad84facef1335b93dec1ad693e1142","unresolved":false,"context_lines":[{"line_number":6,"context_line":"network port scans."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"### Affected Services / Software ###"},{"line_number":9,"context_line":"v1 of the Glance API  (deprecated in Newton)."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Discussion ###"},{"line_number":12,"context_line":"In v1 of the Glance API it is possible to create images with a URL such as"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_4384395d","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":44},"in_reply_to":"9a30ddce_f7bfb0a7","updated":"2017-03-09 15:22:42.000000000","message":"Yes, it was deprecated in Newton by Change-Id: Iab0c4abaea247044fee545342ac450e3415432f7","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"0f6eede99c969b0d90cd23c1ea7ecbde1a3fd15d","unresolved":false,"context_lines":[{"line_number":9,"context_line":"v1 of the Glance API  (deprecated in Newton)."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Discussion ###"},{"line_number":12,"context_line":"In v1 of the Glance API it is possible to create images with a URL such as"},{"line_number":13,"context_line":"`http://localhost:22`. This could then allow an attacker to enumerate internal"},{"line_number":14,"context_line":"network details while appearing masked, since the scan would appear to"},{"line_number":15,"context_line":"originate from glance."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_e301ad39","line":12,"range":{"start_line":12,"start_character":0,"end_line":12,"end_character":23},"updated":"2017-03-09 15:34:41.000000000","message":"See my pedantic comment above.","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"0f6eede99c969b0d90cd23c1ea7ecbde1a3fd15d","unresolved":false,"context_lines":[{"line_number":15,"context_line":"originate from glance."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"### Recommended Actions ###"},{"line_number":18,"context_line":"v1 of the Glance API was deprecated in the Newton cycle, so operators should"},{"line_number":19,"context_line":"upgrade to a later version that will allow use of the v2 API."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Existing deployments can limit policy on `copy_from` by  restricting use to"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"9a30ddce_c3b2e993","line":18,"range":{"start_line":18,"start_character":0,"end_line":18,"end_character":20},"updated":"2017-03-09 15:34:41.000000000","message":"See my pedantic comment above.","commit_id":"e4faa67c84069e71c30206dad2f380bf69b47653"},{"author":{"_account_id":15371,"name":"Tom Patzig","email":"tom.patzig@sap.com","username":"tpatzig"},"change_message_id":"bd0884b0cc6590f1df3f3e72913a786c71df7279","unresolved":false,"context_lines":[{"line_number":21,"context_line":"use of Version 2."},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Existing deployments can limit policy on `copy_from` by restricting use"},{"line_number":24,"context_line":"to `admin` within `policy.json` as follows::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    \"copy_from\": \"role:admin\""},{"line_number":27,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":5,"id":"9a30ddce_389be373","line":24,"updated":"2017-03-09 19:33:14.000000000","message":"double colon?","commit_id":"6336ec2a4d0a8d21c9a213900cc5a23c5507f773"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"dac11845812695a0190152737ecf1cfb00c54f8d","unresolved":false,"context_lines":[{"line_number":21,"context_line":"use of Version 2."},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Existing deployments can limit policy on `copy_from` by restricting use"},{"line_number":24,"context_line":"to `admin` within `policy.json` as follows::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    \"copy_from\": \"role:admin\""},{"line_number":27,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":5,"id":"9a30ddce_63285087","line":24,"in_reply_to":"9a30ddce_389be373","updated":"2017-03-09 19:40:52.000000000","message":"Good catch, that\u0027s good for RST but gives you a double colon in markdown.","commit_id":"6336ec2a4d0a8d21c9a213900cc5a23c5507f773"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"b8b1a270240be84f0fa2a9488cbcf2bdcbcd14ef","unresolved":false,"context_lines":[{"line_number":9,"context_line":"Version 1 of the Glance Image Service (deprecated in Newton)."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Discussion ###"},{"line_number":12,"context_line":"In Version 1 of the  Glance Image Service API it is possible to create"},{"line_number":13,"context_line":"images with a URL such as `http://localhost:22`. This could then allow"},{"line_number":14,"context_line":"an attacker to enumerate internal network details while appearing"},{"line_number":15,"context_line":"masked, since the scan would appear to originate from the Glance image"}],"source_content_type":"application/octet-stream","patch_set":7,"id":"9a30ddce_b9ea6b0d","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":21},"updated":"2017-03-10 00:57:47.000000000","message":"remove a space","commit_id":"58d381f81327393e19ae75d4c835828a9a8e19f1"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"110b9b0f93ec5b1660d4b975f2b1704e9f770f06","unresolved":false,"context_lines":[{"line_number":29,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":30,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0078"},{"line_number":31,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1606495"},{"line_number":32,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":8,"id":"9a30ddce_528ea179","line":32,"range":{"start_line":32,"start_character":0,"end_line":32,"end_character":24},"updated":"2017-03-10 06:33:58.000000000","message":"It\u0027s actually called the OpenStack Security Project now. We should start using the new name.","commit_id":"4644c5989a59ad12f4d1e0f164fd62720febdbc2"}]}