Fedora 22: python-keystonemiddleware Security Update
Summary
This package contains middleware modules designed to provide authentication
and authorization features to web services other than OpenStack Keystone.
The most prominent module is keystonemiddleware.auth_token.
This package does not expose any CLI or Python API features.
Update Information:
Update to upstream 1.3.2 which incldes fix for CVE-2015-1852 Update to upstream 1.3.1 + S3token incorrect condition expression for ssl_insecure CVE-2015-1852
Change Log
* Tue Jul 14 2015 Alan Pevec
References
[ 1 ] Bug #1209527 - CVE-2015-1852 OpenStack keystonemiddleware/keystoneclient: S3Token TLS cert verification option not honored https://bugzilla.redhat.com/show_bug.cgi?id=1209527
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update python-keystonemiddleware' at the command line. For more information, refer to "Managing Software with yum", available at .