| |||||||||||||||||||
Fedora alert FEDORA-2013-10467 (openstack-keystone)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-10467 2013-06-10 14:08:53 -------------------------------------------------------------------------------- Name : openstack-keystone Product : Fedora 19 Version : 2013.1.2 Release : 3.fc19 URL : http://keystone.openstack.org/ Summary : OpenStack Identity Service Description : Keystone is a Python implementation of the OpenStack (http://www.openstack.org) identity service API. This package contains the Keystone daemon. -------------------------------------------------------------------------------- Update Information: Stable Grizzly update 2013.1.2 Force simple Bind for authentication CVE-2013-2157 restrict /var/log/keystone/ rhbz#956814 -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 24 2013 apevec@redhat.com 2013.1.2-3 - restrict /var/log/keystone/ rhbz#956814 * Sat Jun 22 2013 apevec@redhat.com 2013.1.2-2 - Force simple Bind for authentication CVE-2013-2157 * Fri Jun 7 2013 Alan Pevec <apevec@redhat.com> 2013.1.2-1 - updated to stable grizzly 2013.1.2 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #971884 - CVE-2013-2157 openstack-keystone: Authentication bypass when using LDAP backend https://bugzilla.redhat.com/show_bug.cgi?id=971884 [ 2 ] Bug #956474 - OpenStack keystone: /var/log/keystone/ is world readable https://bugzilla.redhat.com/show_bug.cgi?id=956474 [ 3 ] Bug #957028 - CVE-2013-2014 OpenStack keystone: no limitation for requests and headers size which can cause a crash https://bugzilla.redhat.com/show_bug.cgi?id=957028 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update openstack-keystone' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||