--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13088
2012-10-06 21:09:40
--------------------------------------------------------------------------------
Name : openstack-quantum
Product : Fedora EPEL 6
Version : 2012.2
Release : 2.el6
URL :
http://launchpad.net/quantum/
Summary : Virtual network service for OpenStack (quantum)
Description :
Quantum is a virtual network service for Openstack. Just like
OpenStack Nova provides an API to dynamically request and configure
virtual servers, Quantum provides an API to dynamically request and
configure virtual networks. These networks connect "interfaces" from
other OpenStack services (e.g., virtual NICs from Nova VMs). The
Quantum API supports extensions to provide advanced network
capabilities (e.g., QoS, ACLs, network monitoring, etc.)
--------------------------------------------------------------------------------
Update Information:
* OpenStack Keystone (Identity service) Folsom release 2012.2
* python-keystoneclient new upstream release 0.1.3
* OpenStack Glance (Image service) Folsom release 2012.2
* OpenStack Glance fix for auth bypass for image deletion (CVE-2012-4573)
* python-glanceclient new package
* python-prettytable new upstream release 0.6.1
* OpenStack Quantum (Virtual network service) Folsom release 2012.2
* python-quantumclient new upstream release 2.1.1
* python-novaclient new upstream release 2.9.0
* python-cinderclient new package
* python-django-openstack-auth new package
* openstack-nova (compute service) Folsom release 2012.2
* openstack-cinder (volumes service) new package
* python-django-horizon Folsom release 2012.2
* novnc new upstream release 0.4
* python-websockify new upstream release 0.2.0
* openstack-utils new release to support Folsom
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #872302 - CVE-2012-4573 CVE-2012-5482 OpenStack: Glance Authentication bypass
for image deletion
https://bugzilla.redhat.com/show_bug.cgi?id=872302
[ 2 ] Bug #873524 - CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret
password and token exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873524
[ 3 ] Bug #873120 - CVE-2012-5474 OpenStack: Dashboard
/etc/openstack-dashboard/local_settings secret key exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873120
[ 4 ] Bug #873447 - CVE-2012-5483 OpenStack: Keystone /etc/keystone/ec2rc secret key
exposure
https://bugzilla.redhat.com/show_bug.cgi?id=873447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openstack-quantum' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------