Bug 814275
Summary: | CVE-2012-2101 openstack-nova: No quota enforced on security group rules [fedora-17] | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Pádraig Brady <pbrady> |
Component: | openstack-nova | Assignee: | Pádraig Brady <pbrady> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 17 | CC: | akscram, alexander.sakhnov, asalkeld, bfilippov, breu, jlieskov, jonathansteffan, markmc, matt_domsch, mlvov, p, rbryant, rkukura |
Target Milestone: | --- | Keywords: | Security, SecurityTracking |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | openstack-nova-2012.1-2.fc17 | Doc Type: | Release Note |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2012-05-02 04:45:59 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 813768 |
Description
Pádraig Brady
2012-04-19 14:09:41 UTC
Thank you for this bug report, Pádraig. Have opened #813768 for public audience. From what I can tell from looking at the proposed upstream patch: https://bugzilla.redhat.com/show_bug.cgi?id=813768#c0 this issue would affect the versions of the openstack-nova package, as shipped with Fedora release of 16 and Fedora EPEL 6 (though the proposed patch would need to be backported to apply gracefully against these versions). Are these assumptions correct? Could you confirm that? (so I could create trackers for Fedora-16 and Fedora EPEL-6 openstack-nova package versions too). Thank you, Jan. openstack-nova-2012.1-2.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/openstack-nova-2012.1-2.fc17 Package openstack-nova-2012.1-2.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing openstack-nova-2012.1-2.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-6273/openstack-nova-2012.1-2.fc17 then log in and leave karma (feedback). openstack-nova-2012.1-2.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. |