yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1319309] Re: RC4 cipher detected , the Horizon, qpidd & Chef server affected.

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Zhang Yun <zhangyun@xxxxxxxxxx>
Date: Tue, 27 May 2014 02:38:51 -0000
Reply-to: Bug 1319309 <1319309@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Sorry for the wrong action. No need to open a new one.   Add the new
affected project for this issue.

** Also affects: openstack-chef
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1319309

Title:
  RC4 cipher detected , the Horizon, qpidd & Chef server affected.

Status in OpenStack Dashboard (Horizon):
  Invalid
Status in OpenStack + Chef:
  New
Status in OpenStack Security Advisories:
  Invalid

Bug description:
  The host supports the use of RC4 cipher. There exist flaws in the
  pseudo-random generation stream of bytes of RC4 cipher that decrease
  the actual randomness.

  The Horizon, qpidd & Chef server affected.  For Horizon fixing this
  requires Apache configuration update (mods-enabled/ssl.conf) which is
  made by Recipe: apache2::mo d_ssl.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1319309/+subscriptions