yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1252337] Re: Glance needs a config option to limit the number of tags

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Wed, 04 Dec 2013 14:54:45 -0000
Reply-to: Bug 1252337 <1252337@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: glance
       Status: Fix Committed => Fix Released

** Changed in: glance
    Milestone: None => icehouse-1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1252337

Title:
  Glance needs a config option to limit the number of tags

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released

Bug description:
  Glance v2 allows users to put "tags" on an image.  There is no limit
  to the number of tags.

  This is a (linear) DoS attack vector.

  The fix for this should be done similar to the fix for
  https://bugs.launchpad.net/glance/+bug/1251518 to keep configuration
  consistent.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1252337/+subscriptions