Stay Secure with the Latest Linux Advisories

security advisoryfedorasoftware update

Fedora 20: Security Advisory on Openstack-Neutron DoS Issue - Critical Fix

2013.2.4 rebase; CVE-2014-7821 fixed.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-5997 2015-04-11 04:34:30 -------------------------------------------------------------------------------- Name : openstack-neutron Product : Fedora 20 Version : 2013.2.4 Release : 8.fc20 URL : https://launchpad.net/neutron/ Summary : OpenStack Networking Service Description : Neutron is a virtual network service for Openstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services (e.g., virtual NICs from Nova VMs). The Neutron API supports extensions to provide advanced network capabilities (e.g., QoS, ACLs, network monitoring, etc.) -------------------------------------------------------------------------------- Update Information: 2013.2.4 rebase; CVE-2014-7821 fixed. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 9 2015 Ihar Hrachyshka 2013.2.4-8 - CVE-2014-7821: Fix hostname validation for nameservers, rhbz#1165887 - CVE-2014-7821: Fix hostname regex pattern, rhbz#1165887 * Fri Oct 10 2014 Ihar Hrachyshka 2013.2.4-7 - Readded python-pbr as dependency (was dropped during el6-havana merge). * Fri Oct 10 2014 Ihar Hrachyshka 2013.2.4-6 - Fixed an error in %pre rule that adds neutron user that was introduced during el6-havana branch merged. * Wed Oct 8 2014 Ihar Hrachyshka 2013.2.4-5 - use parallel installed versions in RHEL6 * Mon Sep 29 2014 Ihar Hrachyshka 2013.2.4-4 - enforce force_gateway_on_subnet=True in neutron-dist.conf, rhbz#1090553 * Thu Sep 25 2014 Ihar Hrachyshka 2013.2.4-3 - Forbid regular users to reset admin-only attrs to default values, rhbz#1142013 * Mon Sep 22 2014 Ihar Hrachyshka 2013.2.4-2 - Merged in el6-havana branch, resolving conflictsbetween platforms with if-else conditionals. This is needed because el6-havana was (erroneously) locked when locking el6 branch. * Mon Sep 22 2014 Ihar Hrachyshka 2013.2.4-1 - Update to upstream 2013.2.4 * Wed Jul 23 2014 Ihar Hrachyshka 2013.2.3-13 - no quota for allowed address pair, rhbz#1122428 * Wed Jul 16 2014 Miguel Ángel Ajo 2013.2.3-12 - Moved all plugin sources to python-neutron to avoid breaking hidden upstream dependencies from agents to plugins, etc. fixes rhbz#1120146 - Removed the hyper-v agent exclude. - Added a few LICENSE files to packages that missed it. * Tue Jun 24 2014 Ihar Hrachyshka 2013.2.3-11 - Send SIGTERM signal only to parent process when stopping neutron service, bz#1110642 * Tue Jun 24 2014 Ihar Hrachyshka 2013.2.3-10 - Notify systemd when starting Neutron server, bz#1063427 * Tue Jun 17 2014 Ihar Hrachyshka 2013.2.3-9 - Install SNAT rules for ipv4 only, bz#1110142 * Wed Jun 11 2014 Ihar Hrachyshka 2013.2.3-8 - Ensure routing key is specified in the address for a direct producer, bz#1108025 * Mon May 19 2014 Ihar Hrachyshka 2013.2.3-7 - netaddr

Apr 21, 2015 •Critical Fedora