Back to bug 1742993

Who When What Removed Added
Karun Josy 2019-08-18 09:48:53 UTC Priority unspecified high
Matt Benjamin (redhat) 2019-08-18 13:38:18 UTC Status NEW ASSIGNED
Prashant Dhange 2019-08-19 05:13:31 UTC CC pdhange
Prashant Dhange 2019-08-19 05:19:22 UTC Flags needinfo?(mbenjamin)
Mark Kogan 2019-08-19 10:07:35 UTC CC mkogan
Flags needinfo?(kjosy)
Vikhyat Umrao 2019-08-19 23:43:55 UTC CC vumrao
AMOL LONARE 2019-08-20 03:57:34 UTC CC alonare
Ashish Singh 2019-08-20 05:41:13 UTC CC assingh
Matt Benjamin (redhat) 2019-08-20 11:33:22 UTC CC mhackett
Flags needinfo?(mbenjamin) needinfo?(kjosy) needinfo?(mhackett)
RHEL Program Management 2019-08-28 12:35:52 UTC CC cmalafis
Flags needinfo?(mhackett)
CC mamccoma
Flags needinfo?(mbenjamin)
CC tserlin
Target Release 4.0 3.*
Tejas 2019-08-30 06:01:43 UTC Target Release 3.* 3.3
Target Milestone rc z1
errata-xmlrpc 2019-09-12 04:52:32 UTC CC ygoitom
Status ASSIGNED POST
Flags needinfo?(kjosy)
Fixed In Version RHEL: ceph-12.2.12-65.el7cp
Status POST MODIFIED
Fixed In Version RHEL: ceph-12.2.12-65.el7cp RHEL: ceph-12.2.12-65.el7cp Ubuntu: ceph_12.2.12-61redhat1
CC tchandra
Flags needinfo?(tchandra)
Status MODIFIED ON_QA
RUDRA PRATAP 2019-09-19 09:31:37 UTC CC rpratap
QA Contact tchandra rpratap
Bara Ancincova 2019-09-24 08:48:37 UTC Blocks 1726135
Doc Type If docs needed, set a value Bug Fix
Flags needinfo?(mbenjamin)
Bara Ancincova 2019-09-24 13:36:42 UTC Docs Contact bancinco
Mark Kogan 2019-09-26 17:29:50 UTC Doc Text Cause:
Some Swift requests with headers that contain non-strictly-compliant HTTP 1.1 line-termination character in the "X-Auth-Token:" line, are rejected with "HTTP/1.1 401 Unauthorized" error.

Consequence:
On version 2.5 those requests were processed despite their non-compliance.
After upgrade to version 3.3 those requests began to return an error.

Fix:
Sanitize the HTTP headers to remove the non-compliant line termination characters.

Result:
Swift requests with headers that contain non-strictly-compliant HTTP 1.1 line-termination characters are serviced without errors as they were in previous versions.
Bara Ancincova 2019-09-27 13:16:46 UTC Doc Text Cause:
Some Swift requests with headers that contain non-strictly-compliant HTTP 1.1 line-termination character in the "X-Auth-Token:" line, are rejected with "HTTP/1.1 401 Unauthorized" error.

Consequence:
On version 2.5 those requests were processed despite their non-compliance.
After upgrade to version 3.3 those requests began to return an error.

Fix:
Sanitize the HTTP headers to remove the non-compliant line termination characters.

Result:
Swift requests with headers that contain non-strictly-compliant HTTP 1.1 line-termination characters are serviced without errors as they were in previous versions.
.Swift requests no longer cause the "HTTP/1.1 401 Unauthorized" error

Certain Swift requests with headers that contained non-strictly-compliant HTTP 1.1 line termination character in the "X-Auth-Token:" line were rejected with the "HTTP/1.1 401 Unauthorized" error. On {product} version 2.5 those requests were processed despite their non-compliance. After upgrade to version 3.3 those requests began to return an error. With this update, the non-compliant line termination characters have been removed from the HTTP headers, and the aforementioned Swift requests no longer cause errors.
Flags needinfo?(mbenjamin)
Matt Benjamin (redhat) 2019-09-27 13:20:29 UTC Flags needinfo?(mbenjamin) needinfo?(kjosy) needinfo?(tchandra) needinfo?(mbenjamin) needinfo?(mbenjamin)
Yogesh Mane 2019-10-01 06:06:53 UTC Status ON_QA VERIFIED
CC ymane
Yogesh Mane 2019-10-01 06:57:26 UTC QA Contact rpratap ymane
Matt Benjamin (redhat) 2019-10-17 19:31:08 UTC Blocks 1762916
errata-xmlrpc 2019-10-22 04:57:26 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2019-10-22 13:29:24 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2019-10-22 13:29:24 UTC
errata-xmlrpc 2019-10-22 13:29:43 UTC Link ID Red Hat Product Errata RHBA-2019:3173
Matt Benjamin (redhat) 2019-12-31 12:49:46 UTC Flags needinfo?(kjosy)
Karun Josy 2023-08-04 12:23:40 UTC Flags needinfo?(kjosy)
Red Hat One Jira (issues.redhat.com) 2023-08-04 12:25:51 UTC Link ID Red Hat Issue Tracker RHCEPH-7161

Back to bug 1742993