[Openstack-security] [Bug 1466216] Fix proposed to os-ansible-deployment (kilo)

OpenStack Infra 1466216 at bugs.launchpad.net
Fri Jun 26 16:52:29 UTC 2015


Fix proposed to branch: kilo
Review: https://review.openstack.org/196144

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1466216

Title:
  Upgrade to ansible 1.9.2 when released

Status in Ansible playbooks for deploying OpenStack:
  Fix Committed
Status in openstack-ansible kilo series:
  In Progress
Status in openstack-ansible trunk series:
  Fix Committed

Bug description:
  Ansible 1.9.2 (unreleased) fixed a CVE-2015-3908 that affected usage
  of get_url. The vulnerability is related to allowing an HTTPS
  connection to be MITM'd.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openstack-ansible/+bug/1466216/+subscriptions




More information about the Openstack-security mailing list