[SECURITY] Fedora EPEL 6 Update: python-django-horizon-2012.2-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : python-django-horizon
Product : Fedora EPEL 6
Version : 2012.2
Release : 4.el6
URL : http://horizon.openstack.org/
Summary : Django application for talking to Openstack
Description :
Horizon is a Django application for providing Openstack UI components.
It allows performing site administrator (viewing account resource usage,
configuring users, accounts, quotas, flavors, etc.) and end user
operations (start/stop/delete instances, create/restore snapshots, view
instance VNC console, etc.)
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-django-horizon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: python-quantumclient-2.1.1-0.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : python-quantumclient
Product : Fedora EPEL 6
Version : 2.1.1
Release : 0.el6
URL : https://github.com/openstack/python-quantumclient
Summary : Python API and CLI for OpenStack Quantum
Description :
Client library and command line utility for interacting with Openstack
Quantum's API.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-quantumclient' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: openstack-keystone-2012.2-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-keystone
Product : Fedora EPEL 6
Version : 2012.2
Release : 5.el6
URL : http://keystone.openstack.org/
Summary : OpenStack Identity Service
Description :
Keystone is a Python implementation of the OpenStack
(http://www.openstack.org) identity service API.
This package contains the Keystone daemon.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-keystone' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: openstack-utils-2012.2-6.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-utils
Product : Fedora EPEL 6
Version : 2012.2
Release : 6.el6
URL : https://github.com/fedora-openstack/openstack-utils
Summary : Helper utilities for OpenStack services
Description :
Utilities to aid the setup and configuration of OpenStack packages.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: openstack-nova-2012.2-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-nova
Product : Fedora EPEL 6
Version : 2012.2
Release : 2.el6
URL : http://openstack.org/projects/compute/
Summary : OpenStack Compute (nova)
Description :
OpenStack Compute (codename Nova) is open source software designed to
provision and manage large networks of virtual machines, creating a
redundant and scalable cloud computing platform. It gives you the
software, control panels, and APIs required to orchestrate a cloud,
including running instances, managing networks, and controlling access
through users and projects. OpenStack Compute strives to be both
hardware and hypervisor agnostic, currently supporting a variety of
standard hardware configurations and seven major hypervisors.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-nova' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: python-django-openstack-auth-1.0.2-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : python-django-openstack-auth
Product : Fedora EPEL 6
Version : 1.0.2
Release : 3.el6
URL : http://pypi.python.org/pypi/django_openstack_auth/1.0.2
Summary : Django authentication backend for OpenStack Keystone
Description :
Django OpenStack Auth is a pluggable Django authentication backend that
works with Django's ``contrib.auth`` framework to authenticate a user against
OpenStack's Keystone Identity API.
The current version is designed to work with the
Keystone V2 API.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-django-openstack-auth' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: python-novaclient-2.9.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : python-novaclient
Product : Fedora EPEL 6
Version : 2.9.0
Release : 1.el6
URL : http://pypi.python.org/pypi/python-novaclient
Summary : Python API and CLI for OpenStack Nova
Description :
This is a client for the OpenStack Nova API. There's a Python API (the
novaclient module), and a command-line script (nova). Each implements 100% of
the OpenStack Nova API.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-novaclient' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: openstack-glance-2012.2-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-glance
Product : Fedora EPEL 6
Version : 2012.2
Release : 3.el6
URL : http://glance.openstack.org
Summary : OpenStack Image Service
Description :
OpenStack Image Service (code-named Glance) provides discovery, registration,
and delivery services for virtual disk images. The Image Service API server
provides a standard REST interface for querying information about virtual disk
images stored in a variety of back-end stores, including OpenStack Object
Storage. Clients can register new virtual disk images with the Image Service,
query for information on publicly available disk images, and use the Image
Service's client library for streaming virtual disk images.
This package contains the API and registry servers.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-glance' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: openstack-cinder-2012.2-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-cinder
Product : Fedora EPEL 6
Version : 2012.2
Release : 3.el6
URL : http://www.openstack.org/software/openstack-storage/
Summary : OpenStack Volume service
Description :
OpenStack Volume (codename Cinder) provides services to manage and
access block storage volumes for use by Virtual Machine instances.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-cinder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months
[SECURITY] Fedora EPEL 6 Update: python-cinderclient-0.2.26-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : python-cinderclient
Product : Fedora EPEL 6
Version : 0.2.26
Release : 1.el6
URL : http://github.com/openstack/python-cinderclient
Summary : Python API and CLI for OpenStack cinder
Description :
This is a client for the OpenStack cinder API. There's a Python API (the
cinderclient module), and a command-line script (cinder). Each implements
100% of the OpenStack cinder API.
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-cinderclient' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 5 months