Bug 1392249

Summary:	CVE-2016-9185 openstack-heat: Template source URL allows network port scan [openstack-rdo]
Product:	[Community] RDO	Reporter:	Tim Suter <tsuter>
Component:	openstack-heat	Assignee:	Amit Ugol <augol>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Amit Ugol <augol>
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	aortega, apevec, ayoung, chrisw, cvsbot-xmlrpc, jpeeler, jschluet, kbasil, lhh, lpeer, markmc, rbryant, sclewis, srevivo, tdecacqu, zbitter
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	trunk
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-02-16 15:35:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1391895

Description Tim Suter 2016-11-06 22:18:10 UTC

This as an RDO Project security tracking bug against openstack-heat. It was created
to ensure that one or more security vulnerabilities are fixed.

For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.

[bug automatically created by: add-tracking-bugs]