Bug 767251

Summary:	CVE 2011-4596 openstack-nova: Sanitize EC2 manifests and image tarballs [fedora-16]
Product:	[Fedora] Fedora	Reporter:	Vincent Danen <vdanen>
Component:	openstack-nova	Assignee:	Mark McLoughlin <markmc>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	16	CC:	akscram, alexander.sakhnov, asalkeld, bfilippov, jonathansteffan, markmc, matt_domsch, mlvov, p, rbryant, rkukura
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	openstack-nova-2011.3.1-0.4.10818.fc16	Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-01-19 22:02:25 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	767236

Description Vincent Danen 2011-12-13 16:19:40 UTC

fedora-16 tracking bug for openstack-nova: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the 'blocks' bugs.


[bug automatically created by: add-tracking-bugs]

Comment 1 Fedora Update System 2011-12-16 05:02:51 UTC

openstack-nova-2011.3-13.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/openstack-nova-2011.3-13.el6

Comment 2 Fedora Update System 2011-12-30 13:25:33 UTC

openstack-nova-2011.3-14.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/openstack-nova-2011.3-14.el6

Comment 3 Fedora Update System 2011-12-30 20:06:34 UTC

Package openstack-nova-2011.3-14.el6:
* should fix your issue,
* was pushed to the Fedora EPEL 6 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing openstack-nova-2011.3-14.el6'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5393/openstack-nova-2011.3-14.el6
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2012-01-06 16:02:22 UTC

openstack-nova-2011.3-18.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/openstack-nova-2011.3-18.el6

Comment 5 Fedora Update System 2012-01-18 00:29:29 UTC

openstack-nova-2011.3.1-0.4.10818.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/openstack-nova-2011.3.1-0.4.10818.fc16

Comment 6 Fedora Update System 2012-01-19 22:02:25 UTC

openstack-nova-2011.3.1-0.4.10818.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.