Comment 33 for bug 1549483
Revision history for this message
| Brian Rosmaita (brian-rosmaita) wrote | #33 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
bbfa235
demo site
(Get the code!)
I took the liberty of rewriting the note to be more clear about the extent of the attack (i.e., the user cannot manipulate the checksum, just the data) and to be more clear about how images can be shared out in Glance and what policies govern this. But I'm not a security guy, so Tristan and Luke may need to rewrite. Also, I will grab Nikhil from Glance coresec to read over for accuracy.