Bug 1412837

Summary:	CVE-2016-9590 puppet-swift: installs config file with world readable permissions [openstack-rdo]
Product:	[Community] RDO	Reporter:	Summer Long <slong>
Component:	distribution	Assignee:	Lars Kellogg-Stedman <lars>
Status:	CLOSED ERRATA	QA Contact:	Shai Revivo <srevivo>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aortega, apevec, ayoung, chris.brown, chrisw, cvsbot-xmlrpc, jjoyce, jschluet, kbasil, lhh, lpeer, markmc, rbryant, sclewis, srevivo, tdecacqu
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	trunk
Hardware:	All
OS:	Linux
Whiteboard:	component:puppet-swift
Fixed In Version:		Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-06-22 15:56:59 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1410293

Description Summer Long 2017-01-12 22:55:43 UTC

This as an RDO Project security tracking bug against puppet-swift. It was created
to ensure that one or more security vulnerabilities are fixed.

For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.

[bug automatically created by: add-tracking-bugs]

Comment 1 Christopher Brown 2017-06-22 15:56:59 UTC

All affected products updated so closing.