)]}'
{"security-notes/OSSN-0079":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"ef3cdcde2685d80c657397eeb83913806d5178d6","unresolved":false,"context_lines":[{"line_number":24,"context_line":"A local attacker could then use this flaw to gain access of the cephx"},{"line_number":25,"context_line":"secret key and perform certain privileged operations within the cluster."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"An existing CVE is already present for this issue [1]"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"### Contacts / References ###"},{"line_number":30,"context_line":"The issue has been resolved upstream. Users running qemu version 2.6 or"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1f1a1f67_7106bd1e","line":27,"updated":"2017-07-18 13:33:13.000000000","message":"nit: Missing a period on the end here.","commit_id":"4d2c0a1fd75e8531a94f4ca57b817b242baa916b"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"e7d98045f3ed32ae49e7dc4bfa3e987def81b561","unresolved":false,"context_lines":[{"line_number":24,"context_line":"A local attacker could then use this flaw to gain access of the cephx"},{"line_number":25,"context_line":"secret key and perform certain privileged operations within the cluster."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"An existing CVE is already present for this issue [1]"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"### Contacts / References ###"},{"line_number":30,"context_line":"The issue has been resolved upstream. Users running qemu version 2.6 or"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1f1a1f67_314f2094","line":27,"in_reply_to":"1f1a1f67_7106bd1e","updated":"2017-07-18 15:46:03.000000000","message":"Done","commit_id":"4d2c0a1fd75e8531a94f4ca57b817b242baa916b"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"fdec1ea72cc2adf26ecf4eac21f0470e42e6a381","unresolved":false,"context_lines":[{"line_number":35,"context_line":"Red Hat users running RHEL 7.3 or later are not vulnerable."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":38,"context_line":"[1] https://access.redhat.com/security/cve/CVE-2015-5160"},{"line_number":39,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0079"},{"line_number":40,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1686743"},{"line_number":41,"context_line":"OpenStack Security Project : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1f1a1f67_112309bf","line":38,"updated":"2017-07-18 13:56:14.000000000","message":"For consistency, consider linking CVEs at MITRE\u0027s site like the VMT does in OSSAs, i.e. http://cve.mitre.org/cgi-bin/cvename.cgi?name\u003dCVE-2015-5160 .","commit_id":"4d2c0a1fd75e8531a94f4ca57b817b242baa916b"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"e7d98045f3ed32ae49e7dc4bfa3e987def81b561","unresolved":false,"context_lines":[{"line_number":35,"context_line":"Red Hat users running RHEL 7.3 or later are not vulnerable."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":38,"context_line":"[1] https://access.redhat.com/security/cve/CVE-2015-5160"},{"line_number":39,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0079"},{"line_number":40,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1686743"},{"line_number":41,"context_line":"OpenStack Security Project : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1f1a1f67_51285c95","line":38,"in_reply_to":"1f1a1f67_112309bf","updated":"2017-07-18 15:46:03.000000000","message":"I did consider that, but as its content empty I used the one from launchpad. Its in a reserved state now, should I still change do you think?","commit_id":"4d2c0a1fd75e8531a94f4ca57b817b242baa916b"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"958f68e4212472687cb3bcaaa8905b9c57f4ebe1","unresolved":false,"context_lines":[{"line_number":35,"context_line":"Red Hat users running RHEL 7.3 or later are not vulnerable."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":38,"context_line":"[1] https://access.redhat.com/security/cve/CVE-2015-5160"},{"line_number":39,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0079"},{"line_number":40,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1686743"},{"line_number":41,"context_line":"OpenStack Security Project : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1f1a1f67_74e58637","line":38,"in_reply_to":"1f1a1f67_51285c95","updated":"2017-07-18 15:52:39.000000000","message":"Up to you, which is why I didn\u0027t -1. MITRE is the official location for CVE details and they do eventually get filled in. One way you can help is to either encourage the CNA who originally assigned it to do that, or you can go to https://cveform.mitre.org/ and choose \"Notify CVE about a publication\" as the request type, then fill in the relevant fields.","commit_id":"4d2c0a1fd75e8531a94f4ca57b817b242baa916b"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"cb17992d7ade1f4c7849efac4e7190bc4cfe8443","unresolved":false,"context_lines":[{"line_number":32,"context_line":""},{"line_number":33,"context_line":"No change is required in Nova or Ceph to resolve this issue."},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Red Hat users running RHEL 7.3 or later are not vulnerable."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":38,"context_line":"[1] https://access.redhat.com/security/cve/CVE-2015-5160"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"1f1a1f67_6c859606","line":35,"updated":"2017-07-19 15:04:19.000000000","message":"It doesn\u0027t seem like we would usually include lines 30-35 in the references section ?","commit_id":"aed1639cc4571089a42d85c0a18410ad0a768e37"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"064f60a3649c47cf1cafaca4eec27346d1824f04","unresolved":false,"context_lines":[{"line_number":32,"context_line":""},{"line_number":33,"context_line":"No change is required in Nova or Ceph to resolve this issue."},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Red Hat users running RHEL 7.3 or later are not vulnerable."},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Author: Luke Hinds, Red Hat"},{"line_number":38,"context_line":"[1] https://access.redhat.com/security/cve/CVE-2015-5160"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"1f1a1f67_7d265e6a","line":35,"in_reply_to":"1f1a1f67_6c859606","updated":"2017-07-19 16:21:10.000000000","message":"Oh hold on, I am completely missing \u0027Recommended Actions\u0027 - let me patch.","commit_id":"aed1639cc4571089a42d85c0a18410ad0a768e37"}]}