July 2012 - OpenStack-announce - lists.openstack.org

OpenStack Community Weekly Newsletter (July 20-27)
by Stefano Maffulli 28 Jul '12

28 Jul '12

Highlights of the week Join The OpenStack Foundation <http://www.openstack.org/blog/2012/07/join-the-openstack-foundation/> The OpenStack community has worked hard since the announcement of intention to establish an OpenStack Foundation in October 2011. We've come to the point where Individual Members can join and begin making important contributions like nominating board members: http://openstack.org/join (It's free!) OpenStack Foundation Board -- 2012 Election Candidates <http://www.openstack.org/community/openstack-foundation-board-2012-election…> See the current list of nominees for the OpenStack Foundation 2012 Board Member Elections who have received at least one nomination. A candidate must receive at least 10 nominations to appear on the ballot. Any active member of the OpenStack Foundation can support a nominee at the links below or nominate a new candidate by emailing secretary(a)openstack.org <mailto:secretary@openstack.org> (the acting secretary is Jonathan Bryce). A candidate must receive at least 10 nominations to appear on the ballot. *The final day to nominate a candidate is August 6, 2012.* *Creating a development cycle that is more user friendly*** <http://markmail.org/message/7pm63xkknide7oob> *Following recent discussions about increasing the involvement of users in the development of OpenStack, a new thread started. Your opinion is appreciated.* A review of the 1st London OpenStack Meetup <http://berrange.com/posts/2012/07/26/a-review-of-the-1st-london-openstack-m…> The report by Daniel P. Berrangé about a fabulous night, with views across London via the open air roof terrace, watered with pizza & drinks and warm weather in London. Daniel's talk is available also as podcast <http://cloudevangelist.org/2012/07/27/openstack_podcast/> on Cloud Evangelist <http://cloudevangelist.org/> blog. Weekly Hyper-V meeting on Freenode/#openstack-hyper-v <http://markmail.org/message/wxbmggolzwdlldgs> Anyone interested in bringing back support for Hyper-V in Nova is invited to join the new OpenStack-Hyper-V team. Tips and tricks * By Mark McLoughlin <http://blogs.gnome.org/markmc>: How <http://blogs.gnome.org/markmc/2012/07/27/ancient-history/>find the bzr merge proposal in launchpad which caused a given commit to be merged. * By Sébastien Han <http://sebastien-han.fr/>: Watch your nova log at the same time <http://sebastien-han.fr/blog/2012/07/23/tips-watch-your-nova-log-at-the-sam…> Upcoming Events * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * OpenStack Project Meeting 2012-07-24: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> and Meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> Welcome new contributors Celebrating the first patches submitted this week by: * Aaron Orosen, Nicira * Nayna Patel, HP /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2012-010] Various Keystone token expiration issues (CVE-2012-3426)
by Thierry Carrez 28 Jul '12

28 Jul '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2012-010 CVE: CVE-2012-3426 Date: July 27, 2012 Title: Various Keystone token expiration issues Impact: Medium Reporter: Derek Higgins Products: Keystone Affects: Essex, Folsom Description: Derek Higgins reported various issues affecting Keystone token expiration. A token expiration date can be circumvented by continuously creating new tokens before the old one has expired. Existing tokens also remain valid after a user account is disabled or after an account password changed. An authenticated and authorized user could potentially leverage those vulnerabilities to extend his access beyond the account owner expectations. Folsom fixes: http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb… http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c7… http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0… Essex fixes: http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b323545583… http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e03… http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6… References: https://bugs.launchpad.net/keystone/+bug/998185 https://bugs.launchpad.net/keystone/+bug/997194 https://bugs.launchpad.net/keystone/+bug/996595 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-3426 Notes: Those fixes were already included in Keystone 2012.1.1 stable update and the Folsom-1 development milestone. - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJQErMZAAoJEFB6+JAlsQQjMrkP/juA+StMaNQNNqfPyV4gFJHG mI/ZTFq7lf9HBqqxrKbWKdDdAW+AbGM+EXL6Vhu0xBCIk0Q9+dyj1t6BQd/Y/CMv Je5XWZ3YrufHtNI37I9We8hrNBz4WoVhAyLZNHPHmngRu/Dxz8BNtKC4mSrG5bLL ammjtdnecRLPa3GkqYi6tFQgKSzAiU/edXx0+h9veMaxvxKmDzwIKJ625p6CmouR esCnoMkC23e2IoDnq85WaoqK9V8PyMJJ8auU1P+olA/VdvTIXOPAiMOrclEOuFCw EVENPwXmzh/hM2LZKZSSmRgWxSvADfCWnTWc8VT0CvVbJXkOegwMgsFvzd/oy89Q huEu0HiBdOw7yDet5n1f63Es0NO108jEvlN4LNEF0emEv6fNo6rbKHpIqw5R+Dxp Yiu0j3XOiBhE6eIUvVdXv+mAvaRJsk9KzWQaAyrp2UKO52MU6G11+zwJpJCVCRod yjO2kSm1ksZzSF2ZmoteOeFdqJp11qI1LbfT6vswuacW1zrCPHbAM8RP1DS/5X4d PdgzJBZhE20G1YcY+kMMqIlmIs9hgP6IcaeHKxXcrW3Oq/flI00Rade/HmAamQ51 PsT9cVeE3uZt8plARG1SXyzQp8WF+U//H2af2BGiClX3TdrZU3EIOsKby77Xgwxl Z7A0lu7IqS1+4Fm/6738 =fX6q -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (July 13-20)
by Stefano Maffulli 21 Jul '12

21 Jul '12

Highlights of the week Join The OpenStack Foundation <http://www.openstack.org/blog/2012/07/join-the-openstack-foundation/> The OpenStack community has worked hard since the announcement of intention to establish an OpenStack Foundation in October 2011. We've come to the point where Individual Members can join and begin making important contributions like nominating board members: http://openstack.org/join (It's free!) TryStack.org Adds New ARM Technology-Powered Zone <http://www.openstack.org/blog/2012/07/trystack-org-adds-new-arm-technology-…> A monumental day in ARM server history! TryStack.org <http://www.trystack.org/>, the hosted cloud sandbox for OpenStack, now has an ARM-based OpenStack zone in addition to the x86 zone. (This is, to our knowledge, the first OpenStack cluster made publicly available on an ARM-based system!) <http://www.openstack.org/blog/wp-content/uploads/2012/07/IMG_B474.jpg> Full room at OpenStackDay during OSCON 2012 Tips and tricks * By Sébastien Han <http://sebastien-han.fr/>: how to bring gigabit to your VMs with the virtio driver <http://sebastien-han.fr/blog/2012/07/19/make-the-network-of-your-vms-fly-wi…> Upcoming Events * 13th International Free Software Forum -- OpenStack Track <http://wiki.openstack.org/FISL13> Jul 25 -- 28, 2012 -- Porto Alegre, Brazil Coordination <http://wiki.openstack.org/FISL13> * The 1st London OpenStack Meetup <http://www.meetup.com/Openstack-London/events/55354582/> Jul 25, 2012 -- London, UK Details <http://www.meetup.com/Openstack-London/events/55354582/> * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * Developers join the OpenStack-Dev mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev * Updated page about Cinder http://wiki.openstack.org/Cinder * A patch to Swift starts a discussion about testing environment http://openstack.markmail.org/thread/f7kbw3l6sea27eun * OpenStack Project Meeting was postponed to next week. Welcome new contributors Celebrating the first patches submitted this week by: * Wang Long, qq.com * Lars Gellrich, HP * Isethi Iccha, Rackspace * Tom Hancock, HP * Dmitry Khovyakov, GridDynamics * Tong Li, IBM /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (July 6-13)
by Stefano Maffulli 14 Jul '12

14 Jul '12

Highlights of the week G stands for Grizzly <http://markmail.org/message/nrgea2jdl5ms4hdp> Results of the naming poll for next OpenStack release are in, and the G release will be named "*Grizzly*". The regular poll selected "Gazelle" (35 votes), with "Gilroy" (27 votes) being a close second. But the Grizzly revolt poll showed overwhelming support for the "Grizzly" name (88 votes) rather than going with the results of the regular poll (46 votes). The /Waldon exception/ (accepting elements of the state/country flag in addition to city/county names) will be added to our naming rules for future naming contests :) Some clarifications about Cinder <http://markmail.org/message/bfdqiclqtkv2tqql> With the promotion of Cinder to OpenStack core project, Cinder's PTL John Griffith explained what the project does and what the future release, Grizzly, may look like. OpenStack operators are invited to give their opinion and help developers take the best decision. Lots Of OpenStack At OSCON 2012 <http://www.openstack.org/blog/2012/07/lots-of-openstack-at-oscon-2012/> Only a few days to OSCON: find the full list of talks related to OpenStack and don't forget to RSVP fort the OpenStack Party <http://www.oscon.com/oscon2012/public/schedule/detail/26369> at Spirit of 77 (500 NE MLK Blvd.) on July 18th. OpenStack Summit Fall 2012: Tickets & Sponsorships now available <http://www.openstack.org/blog/2012/07/openstack-summit-fall-2012-tickets-sp…> The OpenStack Summit is coming to San Diego October 15th-18th at the Manchester Grand Hyatt . Check out the new Summit website <http://www.openstack.org/summit/san-diego-2012/> to learn more, buy tickets, or to become a sponsor. The early bird price for tickets is $400 until August 31st, then it goes up to $600, so please buy your ticket <http://www.openstack.org/summit/san-diego-2012/> now! Everybody is invited to participate, there are no caps like in past events (the only limit is the physical capacity of the location). OpenStack Overview -- Operational Details of a Large Python Project <https://ep2012.europython.eu/conference/talks/openstack-overview-operationa…> Pádraig Brady <https://ep2012.europython.eu/conference/p/padraig-brady> spoke at *EuroPython 2012 about OpenStack. His talk was recorded (audio starts at minute 11:40).* Tips and tricks * By Michael Still: how to use glance replication <http://www.stillhq.com/openstack/000007.html> * By Yong Sheng Gong: Openstack's Floating IPs <https://www.ibm.com/developerworks/mydeveloperworks/blogs/e93514d3-c4f0-4aa…> Upcoming Events * OpenStack India Users July meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/69786832/> Jul 14, 2012 -- Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/69786832/> * The 1st London OpenStack Meetup <http://www.meetup.com/Openstack-London/events/55354582/> Jul 25, 2012 -- London, UK Details <http://www.meetup.com/Openstack-London/events/55354582/> * OSCON <http://www.openstack.org/assets/oscon-pavilion-prospectus-2012.pdf> Jul 16 -- 20, 2012 -- Portland, OR * 13th International Free Software Forum -- OpenStack Track <http://wiki.openstack.org/FISL13> Jul 25 -- 28, 2012 -- Porto Alegre, Brazil Coordination <http://wiki.openstack.org/FISL13> * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * New mailing lists: http://wiki.openstack.org/MailingLists Subscribe to the relevant ones for you. * OpenStack Project Meeting logs: 2012-07-10: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> and full meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> Welcome new contributors Celebrating the first patches submitted this week by: * Tim Daly Jr, Yahoo /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0