yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1319309] Re: RC4 cipher detected , the Horizon, qpidd & Chef server affected.

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Mon, 26 May 2014 14:41:51 -0000
Reply-to: Bug 1319309 <1319309@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: horizon
       Status: New => Incomplete

** Changed in: ossa
       Status: Incomplete => Invalid

** Changed in: horizon
       Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1319309

Title:
  RC4 cipher detected , the Horizon, qpidd & Chef server affected.

Status in OpenStack Dashboard (Horizon):
  Invalid
Status in OpenStack Security Advisories:
  Invalid

Bug description:
  The host supports the use of RC4 cipher. There exist flaws in the
  pseudo-random generation stream of bytes of RC4 cipher that decrease
  the actual randomness.

  The Horizon, qpidd & Chef server affected.  For Horizon fixing this
  requires Apache configuration update (mods-enabled/ssl.conf) which is
  made by Recipe: apache2::mo d_ssl.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1319309/+subscriptions