Bug#778618: [PKG-Openstack-devel] Bug#778618: This patch is not enough

2015-03-02 Thread Thomas Goirand
Hi Gaudenz, Paul and others, Yes, Gaudenz, there is an issue which is still embargoed. I'm getting confused as to what I am allowed to discuss or not. Since this bug was opened, I should be able to tell everything, as it's IMO too late to believe the embargo worked, but anyway, I will still shut u

Bug#778618: [PKG-Openstack-devel] Bug#778618: This patch is not enough

2015-03-02 Thread Moritz Muehlenhoff
On Fri, Feb 27, 2015 at 10:18:46PM +, Paul McMillan wrote: > > If you agree that the linked github patch is complete, I can do an > > upload if you lack the time to do so yourself. I can understand that > > sensitive security issues are involved, but a bit more verboseness would > > be nice. >

Bug#778618: [PKG-Openstack-devel] Bug#778618: This patch is not enough

2015-02-27 Thread Paul McMillan
> Do you have a link to the upstream discussion? Or is this about an > embargoed security issue? The other ticket is an embargoed security issue, unrelated to this one, in an upstream package which is not novnc. Thomas was incorrect to bring it up in this context. > I'm confused. What's true now,

Bug#778618: [PKG-Openstack-devel] Bug#778618: This patch is not enough

2015-02-27 Thread Gaudenz Steinlin
Thomas Goirand writes: > Hi, > > I'm not supposed to disclose too much yet, but I have to write in this > bug still. > > The provided patch is *not enough* and the issue is still being > discussed upstream. So I can't just patch novnc and be gone with it... > I'll update this package as soon as