yahoo-eng-team team mailing list archive

[Launchpad Bug Tracker <1319309@xxxxxxxxxxxxxxxxxx>]

[Expired for OpenStack + Chef because there has been no activity for 60
days.]

** Changed in: openstack-chef
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1319309

Title:
  RC4 cipher detected , the Horizon, qpidd & Chef server affected.

Status in OpenStack Dashboard (Horizon):
  Invalid
Status in OpenStack + Chef:
  Expired
Status in OpenStack Security Advisories:
  Invalid

Bug description:
  The host supports the use of RC4 cipher. There exist flaws in the
  pseudo-random generation stream of bytes of RC4 cipher that decrease
  the actual randomness.

  The Horizon, qpidd & Chef server affected.  For Horizon fixing this
  requires Apache configuration update (mods-enabled/ssl.conf) which is
  made by Recipe: apache2::mo d_ssl.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1319309/+subscriptions