Bug 734348

Summary: Figure out what to do about ajaxterm
Product: [Fedora] Fedora Reporter: Mark McLoughlin <markmc>
Component: openstack-novaAssignee: Alan Pevec <apevec>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: apevec, apevec, asalkeld, markmc, matt_domsch
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-08 10:41:29 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Mark McLoughlin 2011-08-30 07:05:47 UTC 
During the nova build, we delete ajaxterm as a temporary solution

What's the correct solution? Can we use the system version of ajaxterm?
Comment 1 Alan Pevec 2011-11-15 16:41:31 UTC 
Some notes to myself:
Ajaxterm was recently orphaned and retired in Fedora: http://lists.fedoraproject.org/pipermail/devel/2011-April/150169.html
http://pkgs.fedoraproject.org/gitweb/?p=Ajaxterm.git;a=commit;h=67e6949ec1a28abc876d60c301070d4e157c01c2
https://admin.fedoraproject.org/pkgdb/acls/name/Ajaxterm

Upstream seems to be stagnant (is it perfect?): https://github.com/antonylesuisse/qweb/tree/master/ajaxterm

But fixes do seem to happen in debian/ubuntu packaging:
http://git.kirya.net/?p=debian/ajaxterm.git;a=summary

There was exploit: http://www.cvedetails.com/cve/CVE-2009-1629/
fixed in Fedora http://lwn.net/Alerts/421312/

And, ajaxterm wins googlefight with anyterm! http://www.googlefight.com/index.php?lang=en_GB&word1=ajaxterm&word2=anyterm
Comment 2 Alan Pevec (Fedora) 2012-01-27 15:44:22 UTC 
Suggested for removal upstream:
https://lists.launchpad.net/openstack/msg07065.html

"- Ajaxterm (unmaintained, security issues, replaced by VNC console)"
Comment 3 Alan Pevec 2012-02-08 10:41:29 UTC 
Removed upstream https://review.openstack.org/#change,3850