yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1319309] Re: RC4 cipher detected , the Horizon, qpidd & Chef server affected.

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Tristan Cacqueray <tristan.cacqueray@xxxxxxxxxxxx>
Date: Wed, 14 May 2014 21:20:59 -0000
Reply-to: Bug 1319309 <1319309@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Also affects: ossa
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1319309

Title:
  RC4 cipher detected , the Horizon, qpidd & Chef server affected.

Status in OpenStack Dashboard (Horizon):
  New
Status in OpenStack Security Advisories:
  New

Bug description:
  The host supports the use of RC4 cipher. There exist flaws in the
  pseudo-random generation stream of bytes of RC4 cipher that decrease
  the actual randomness.

  The Horizon, qpidd & Chef server affected.  For Horizon fixing this
  requires Apache configuration update (mods-enabled/ssl.conf) which is
  made by Recipe: apache2::mo d_ssl.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1319309/+subscriptions