- OpenStack-announce - lists.openstack.org

OpenStack Community Weekly Newsletter (Dec 6 - 13)
by Stefano Maffulli 13 Dec '14

13 Dec '14

OpenStack DefCore Enters Execution Phase. Help! <http://robhirschfeld.com/2014/12/11/openstack-defcore-havana/> OpenStack DefCore Committee has established the principles and first artifacts required for vendors using the OpenStack trademark <https://wiki.openstack.org/wiki/Governance/DefCoreLexicon>. Over the next release cycle, we will be applying these to the Icehouse and Juno releases. Rob will be doing two sessions about DefCore next week (will be recorded): Tues Dec 16 at 9:45 am PST- OpenStack Podcast #14 with Jeff Dickey <http://goo.gl/pR41zD> and Thurs Dec 18 at 9:00 am PST – Online Meetup about DefCore with Rafael Knuth <http://rafstack.tumblr.com/post/104926788033/online-meetup-defcore-making-o…>. Keeping up to date with OpenStack Blueprints <http://technodrone.blogspot.com/2014/12/keeping-up-to-date-with-openstack.h…> OpenStack <http://www.openstack.org/> is a living product – and because it is community driven - changes are being proposed almost constantly. The specifications approved in each project are published on http://specs.openstack.org <http://specs.openstack.org/> as html pages and RSS feeds. Maish Saidel-Keesing <http://technodrone.blogspot.com/search/label/OpenStack> compiled an OPML file <http://maishsk.com/blog/files/opml.opml> with all the current projects that you can add to your favorite RSS reader. Korea User Group got "The community of the Year" award <http://lists.openstack.org/pipermail/user-committee/2014-December/000334.ht…> Great news for the whole OpenStack community: OpenStack Korea User Group received “The community of the Year” award from Korea Open Source Software Association. Congratulations to all for the amazing work you've been doing all these years. The Korean user group doesn't rest on their laurels and they're busy organizing the OpenStack Day Korea 2015: check the sponsorship opportunities <https://www.dropbox.com/s/cz1i3h2kho40vej/OpenStack%20Day%20Sponsor%20Progr…>. Ask OpenStack passes 10,000 questions <http://www.openstack.org/blog/2014/12/ask-openstack-passes-10000-questions/> Recently, our Q&A site, Ask OpenStack passed an important milestone – more than 10,000 questions. Since it was launched by community manager Stefano Maffulli with the help of our tame AskBot <http://askbot.com/> developer Evgeny Fadeev <https://github.com/evgenyfadeev> early last year, we’ve had great support from our entire community – users and vendor support staff alike getting on there and helping each other out. Everybody can give answers: read how to give answers <https://wiki.openstack.org/wiki/Community/AskModerators> and head out to answer questions on Ask OpenStack <http://www.openstack.org/blog/feed/%20https://ask.openstack.org/en/question…>. Relevant Conversations * Nova Specs for Kilo <http://www.stillhq.com/openstack/kilo/000006.html> and live updates for Nova review day <https://review.openstack.org/#/dashboard/?foreach=project%3A%5Eopenstack%2F…> * Proposal for Neutron core and vendor code decomposition <https://review.openstack.org/134680> [approved and merged] * Looking for ten individuals to participate in a usability study sponsored by the Horizon team <http://lists.openstack.org/pipermail/user-committee/2014-December/000335.ht…> * [neutron] FYI: VPNaaS Sub-team meeting setup... <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052705.html> Deadlines and Development Priorities * Neutron Spec Approval Deadline (SAD) <https://wiki.openstack.org/wiki/NeutronKiloProjectPlan>: Monday 12-15-2014. Spec reviews dashboard <https://review.openstack.org/#/dashboard/?foreach=project%3A%5Eopenstack%2F…> o If you have specs pending, stay very vigilant and react fast to comments from reviewers. * [neutron] Services are now split out and neutron is open for commits! <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052713.html> * [nova] Kilo Project Priorities <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052225.html> * Neutron Priorities for Kilo <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052230.html> * [Nova] Mid-cycle meetup details for kilo <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052164.html> Security Advisories and Notices * Horizon denial of service attack through login page (CVE-2014-8124) <http://lists.openstack.org/pipermail/openstack-announce/2014-December/00030…> * Neutron DoS through invalid DNS configuration (CVE-2014-7821) ERRATA 1 <http://lists.openstack.org/pipermail/openstack-announce/2014-December/00030…> Tips ‘n Tricks * By Michelle Yakura <https://www.mirantis.com/blog/tips-on-overcoming-skeptics-and-other-obstacl…>: Tips on Overcoming Skeptics and Other Obstacles to Production OpenStack Clouds <https://www.mirantis.com/blog/tips-on-overcoming-skeptics-and-other-obstacl…> * By Sébastien Han <https://sebastien-han.fr/>: DevStack and remote Ceph cluster <https://sebastien-han.fr/blog/2014/12/11/devstack-and-remote-ceph-cluster/> * By Lars Kellogg-Stedman <http://blog.oddbit.com/>: Cloud-init and the case of the changing hostname <http://blog.oddbit.com/2014/12/10/cloudinit-and-the-case-of-the-changing-ho…> * By Steve Dake <http://sdake.io/>: Isn’t it Atomic on OpenStack Ironic, don’t you think? <http://sdake.io/2014/12/09/isnt-it-atomic-on-openstack-ironic-dont-you-thin…> * By Sébastien Han <https://sebastien-han.fr/>: OpenStack: import existing Ceph volumes in Cinder <https://sebastien-han.fr/blog/2014/12/09/openstack-import-existing-ceph-vol…> * By Craige McWhirter <http://mcwhirter.com.au//tags/OpenStack/>: Managing KVM Console Logs for Nova <http://mcwhirter.com.au//craige/blog/2014/Managing_KVM_Console_Logs_for_Nov…> * By Ryan Hefner: Using Packstack to install Cinder with NetApp Storage Backends <http://netapp.github.io/openstack/2014/12/06/packstack-cinder/> Reports from Previous Events * MySQL and OpenStack Deep Dive Webinar <https://www.youtube.com/watch?v=I3Be-UtDDkg> Upcoming Events * Dec 17, 2014 <http://fit.edu.pk/tutorials> Building Cloud with OpenStack <http://fit.edu.pk/tutorials> Islamabad, PK <http://fit.edu.pk/tutorials> * Dec 18, 2014 <http://meetu.ps/2DTr9p> Is OpenStack ready for Enterprises? <http://meetu.ps/2DTr9p> New York, New York, US <http://meetu.ps/2DTr9p> * Jan 15, 2015 <http://ow.ly/EKWpY> Deep Dive into Trove <http://ow.ly/EKWpY> Austin, Texas, US <http://ow.ly/EKWpY> * Feb 19 - 20, 2015 <http://www.tech-ies.com/> World Techies Forum <http://www.tech-ies.com/> Mumbai, Maharashtra, IN <http://www.tech-ies.com/> * Apr 13 - 14, 2015 <http://www.percona.com/live/openstack-live-2015/> OpenStack Live <http://www.percona.com/live/openstack-live-2015/> Santa Clara, CA, US <http://www.percona.com/live/openstack-live-2015/> * May 18 - 22, 2015 <https://www.openstack.org/summit/vancouver-2015/> OpenStack Summit May 2015 <https://www.openstack.org/summit/vancouver-2015/> Vancouver, BC <https://www.openstack.org/summit/vancouver-2015/> * Sep 17, 2015 <http://www.openstackbeneluxconference.nl/> OpenStack Benelux Conference 2015 <http://www.openstackbeneluxconference.nl/> Bussum, NL <http://www.openstackbeneluxconference.nl/> Other News * Announcing the openstack ansible deployment repo <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052708.html> * [neutron] mid-cycle update <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052715.html> * [OpenStackClient] OSC Release 1.0.1 <http://lists.openstack.org/pipermail/openstack/2014-December/010723.html> * Fedora 21 Cloud Images Available Today <https://openstack.redhat.com/forum/discussion/995/fedora-21-cloud-images-av…> * Ironic + Crowbar: United in Vision, Complementary in Approach <http://robhirschfeld.com/2014/12/09/openstack-ironic-crowbar/> * The EMC Federation Joins the OpenStack Foundation <http://www.cloudscaling.com/blog/openstack/the-emc-federation-joins-the-ope…> * Jumpgate: SoftLayer’s free library for OpenStack cloud compatibility <http://thoughtsoncloud.com/2014/12/jumpgate-softlayers-free-library-opensta…> * Third-party CI documentation WG forming <http://lists.openstack.org/pipermail/openstack-dev/2014-December/052227.html> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-11-25-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-11-25-21.…>. Got Answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Keystone: Users with underscore do not show up in user-list <https://ask.openstack.org/en/question/56166/keystone-users-with-underscore-…> * RDO Icehouse with ceph - libvirt error <https://ask.openstack.org/en/question/56148/rdo-icehouse-with-ceph-libvirt-…> * Error when trying to suspend/resume VM in JavaScript with ajax <https://ask.openstack.org/en/question/56067/error-when-trying-to-suspendres…> * Add new ML2 Driver without needing to release all of neutron <https://ask.openstack.org/en/question/56066/add-new-ml2-driver-without-need…> * External Ip not working Until Neutron server is restarted <https://ask.openstack.org/en/question/56047/external-ip-not-working-until-n…> * Add new server instance to existing load balancer pool in heat stack <https://ask.openstack.org/en/question/56042/add-new-server-instance-to-exis…> * heat stack output-show return null <https://ask.openstack.org/en/question/56035/heat-stack-output-show-return-n…> * How to repair a missing container in Swift <https://ask.openstack.org/en/question/56012/how-to-repair-a-missing-contain…> * LBaaS: lb-vip-create fails on device driver haproxy_ns <https://ask.openstack.org/en/question/55970/lbaas-lb-vip-create-fails-on-de…> Welcome New Reviewers and Developers Chris Gacsal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ankur Rishi <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Babu Shanmugam <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Alger Wang <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Abhishek G M <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Tom Pollard <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Bogun Dmitriy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Dan Ritchie <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Cosmin Poieana <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> wangtianfa <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Roman Dobosz <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Park <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Moshe Levi <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Matt Borland <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Toshiaki Higuchi <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Dexter Fryar <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Chris Gacsal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Hironori Shiina <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2014-039.1] Neutron DoS through invalid DNS configuration (CVE-2014-7821) ERRATA 1
by Tristan Cacqueray 11 Dec '14

11 Dec '14

OpenStack Security Advisory: 2014-039 (ERRATA 1) CVE: CVE-2014-7821 Date: December 10, 2014 Title: Neutron DoS through invalid DNS configuration Reporter: Henry Yamauchi, Charles Neill and Michael Xin (Rackspace) Products: Neutron Versions: up to 2014.1.3 and 2014.2 Description: Henry Yamauchi, Charles Neill and Michael Xin from Rackspace reported a vulnerability in Neutron. By configuring a maliciously crafted dns_nameservers an authenticated user may crash Neutron service resulting in a denial of service attack. All Neutron setups are affected. Errata: The former fix did not take into account the usage of hostnames as nameserver and caused a regression for this use-case. This update provides an additional fix for that issue. Kilo (development branch) fixes: https://review.openstack.org/135616 (original) https://review.openstack.org/137560 (errata) Juno fixes: https://review.openstack.org/135623 (original) https://review.openstack.org/139061 (errata) Icehouse fixes: https://review.openstack.org/135624 (original) https://review.openstack.org/139063 (errata) Notes: These fixes are included in the 2014.2.1 release and will be included in a future 2014.1.4 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7821 https://launchpad.net/bugs/1378450 OSSA History: 2014-12-10 - Errata 1 2014-11-19 - Original Version -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[OSSA 2014-040] Horizon denial of service attack through login page (CVE-2014-8124)
by Tristan Cacqueray 10 Dec '14

10 Dec '14

OpenStack Security Advisory: 2014-040 CVE: CVE-2014-8124 Date: December 09, 2014 Title: Horizon denial of service attack through login page Reporter: Eric Peterson (Time Warner Cable) Products: Horizon Versions: up to 2014.1.3 and 2014.2 version up to 2014.2.1 Description: Eric Peterson from Time Warner Cable reported a vulnerability in Horizon. By making repeated requests to the Horizon login page a remote attacker may generate unwanted session records, potentially resulting in a denial of service. Only Horizon setups using a db or memcached session engine are affected. Kilo (development branch) fix: https://review.openstack.org/140353 Juno fix: https://review.openstack.org/140358 Icehouse fix: https://review.openstack.org/140356 django_openstack_auth fix: https://review.openstack.org/140352 Notes: This fix will be included in future 2014.1.3 and 2014.2.1 releases. The django_openstack_auth Horizon dependency requires the additional patch above. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8124 https://launchpad.net/bugs/1394370 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Nov 28 - Dec 6)
by Stefano Maffulli 06 Dec '14

06 Dec '14

1 0

OpenStack 2014.2.1 released
by Alan Pevec 05 Dec '14

05 Dec '14

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the release of the 2014.2.1 stable Juno release. We have been busy reviewing and accepting backported bugfixes to the stable/juno branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 123 bugs have been fixed across all projects. These updates to Juno are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/juno/2014.2.1 https://launchpad.net/cinder/juno/2014.2.1 https://launchpad.net/glance/juno/2014.2.1 https://launchpad.net/heat/juno/2014.2.1 https://launchpad.net/horizon/juno/2014.2.1 https://launchpad.net/keystone/juno/2014.2.1 https://launchpad.net/neutron/juno/2014.2.1 https://launchpad.net/nova/juno/2014.2.1 https://launchpad.net/sahara/juno/2014.2.1 OpenStack Database Service (Trove) did not have stable/juno fixes at this time and will skip 2014.2.1 release. Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2014.2.1 The freeze on the stable/juno branches will be lifted today as we begin working toward the 2014.2.2 release, planned for Jan 29 2015 release and managed by Chuck Short. Thanks, Alan

1 0

Notice of meeting to elect Individual Directors,,The Annual Meeting of the Individual Members to elect directors for the Board of the OpenStack Foundation shall be held from January 12, 2015 to January 16, 2015, commencing at 00:01 UTC on January 12 and ending at 17:00 UTC on January 16. The meeting will be held by remote communication. While technically a "meeting" according to our bylaws, all of the voting will take place online. If you are an eligible voter, you will receive an email
by Stefano Maffulli 29 Nov '14

29 Nov '14

Notice of meeting to elect Individual Directors The Annual Meeting of the Individual Members to elect directors for the Board of the OpenStack Foundation shall be held from January 12, 2015 to January 16, 2015, commencing at 00:01 UTC on January 12 and ending at 17:00 UTC on January 16. The meeting will be held by remote communication <http://www.openstack.org/election/2015-individual-director-election/>. While technically a "meeting" according to our bylaws, all of the voting will take place online. If you are an eligible voter, you will receive an email with a link that will allow you to complete your ballot during the time that the election occurs. In the meantime, nominate OpenStack Foundation Individual Members as candidates for election <http://www.openstack.org/election/2015-individual-director-election/>. The requirements for nominating any individual to run for the Board must be completed and received by the OpenStack Foundation on or prior to 23:00 UTC on December 12, 2014. Nominations Close: 23:00 UTC, December 12, 2014. Polls Open: 00:01 UTC, January 12, 2015. Polls Close: 17:00 UTC, January 16, 2015 <http://www.timeanddate.com/worldclock/fixedtime.html?msg=Close+of+meeting+-…>. The Foundation Board of Directors is also considering three potential changes to the OpenStack Foundation Bylaws, as a result of the work during the DefCore Committee's activities. If the proposed amendments are passed at the Board meeting on December 2, they will each be on the ballot in the upcoming election January 12-16, 2015. Read an explanation of the three amendments and the proposed language <https://wiki.openstack.org/wiki/Governance/Foundation/2014ProposedBylawsAme…>. Seeing Murano Actions in action <https://www.mirantis.com/blog/seeing-murano-actions-action/> Murano is an OpenStack project that enables application developers and cloud developers to publish applications in a browsable catalog. With the catalog, users can create complex multi-tier application environments with the push of a button using published applications as building blocks. reBot – using Lego for bare metal deployments on Intel NUC <http://www.cloudbase.it/rebot/> Cloudbase uses a lot of Intel Next Unit of Computing (NUC) <http://www.intel.com/content/www/us/en/nuc/nuc-kit-d54250wyk.html> for internal testing and development work. NUCs lack the ability to power them on and off remotely, like higher grade servers do with technologies likeIPMI <http://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface>, AMT <http://www.intel.com/content/www/us/en/architecture-and-technology/intel-ac…>, iLO <http://h17007.www1.hp.com/us/en/enterprise/servers/management/ilo/index.aspx>. In pure hacker spirit, Cloudbase invented their own to have some fun. Spoiler alert: it involves Lego. Fedora Atomic, OpenStack, and Kubernetes (oh my) <http://blog.oddbit.com/2014/11/24/fedora-atomic-openstack-and-kubernetes-oh…> Lars Kellogg-Stedman <http://blog.oddbit.com/> has embarked in a fascinating journey: follow his thoughts among the most recent, bleeding edge technologies. Relevant Conversations * Converging in the project structure reform <http://lists.openstack.org/pipermail/openstack-tc/2014-November/000887.html> * Proposal to split Neutron into separate repositories <http://lists.openstack.org/pipermail/openstack-dev/2014-November/050961.html> * Paris OpenStack Summit - The Big Tent Casts a Long Shadow <http://blog.nemebean.com/content/paris-openstack-summit-big-tent-casts-long…> * [Neutron] Stale patches <http://lists.openstack.org/pipermail/openstack-dev/2014-November/050498.html> * [ossg] Introducing Bandit code security analyzer <http://lists.openstack.org/pipermail/openstack-dev/2014-November/051523.html> Deadlines and Development Priorities * Neutron Spec Proposal Deadline (SPD) <https://wiki.openstack.org/wiki/NeutronKiloProjectPlan>: Monday 12-8-2014 * Neutron Spec Approval Deadline (SAD) <https://wiki.openstack.org/wiki/NeutronKiloProjectPlan>: Monday 12-15-2014 * Deprecation of Python 2.6 CI Testing <http://lists.openstack.org/pipermail/openstack-dev/2014-November/051551.html>: Nov 30, 2014 * [Nova] Tracking Kilo priorities <http://lists.openstack.org/pipermail/openstack-dev/2014-November/051133.html> * [Neutron][IPv6] Priorities for Kilo? <http://lists.openstack.org/pipermail/openstack-dev/2014-November/051539.html> Tips ‘n Tricks * By Andy Hill <http://virtualandy.wordpress.com/>: Operating OpenStack: Monitoring RabbitMQ <http://virtualandy.wordpress.com/2014/09/02/operating-openstack-monitoring-…> * By Maish Saidel-Keesing <http://technodrone.blogspot.com/search/label/OpenStack>: Start Contributing to OpenStack - The Easy Way #docker <http://technodrone.blogspot.com/2014/11/start-contributing-to-openstack-eas…> * By Cloudenablers: Deploying Openstack with Multi-Hypervisor Environment <http://www.cloudenablers.com/blog/deploying-openstack-with-multi-hypervisor…> * By Robert van Leeuwen <http://engineering.spilgames.com/openstack-operator-tool-novacek/>: OpenStack Operator tool: Novacek <http://engineering.spilgames.com/openstack-operator-tool-novacek/> * By Stephane Combaudon <http://www.percona.com/blog/2014/11/24/schema-changes-in-mysql-for-openstac…>: Schema changes in MySQL for OpenStack Trove users <http://www.percona.com/blog/2014/11/24/schema-changes-in-mysql-for-openstac…> Reports from Previous Events * OpenStack Bootstrapping Hour: Debugging in the Gate <http://lists.openstack.org/pipermail/openstack-dev/2014-November/050922.html> Upcoming Events * Dec 01, 2014 <http://openstack.jp/events/20141201.html> Japan OpenStack User Group Meetup <http://openstack.jp/events/20141201.html> Chiyoda-ku, Tokyo, JP <http://openstack.jp/events/20141201.html> * Dec 02 - 05, 2014 <http://www.gartner.com/technology/summits/na/data-center/> Gartner Data Center Conference <http://www.gartner.com/technology/summits/na/data-center/> Las Vegas, NV <http://www.gartner.com/technology/summits/na/data-center/> * Dec 02, 2014 <http://www.gsebelux.com/Hybrid-Solutions> With or without OpenStack? <http://www.gsebelux.com/Hybrid-Solutions> Herstal, BE <http://www.gsebelux.com/Hybrid-Solutions> * Dec 09, 2014 Stockholm OpenStack Meetup Stockholm, Sweden <http://www.meetup.com/OpenStack-User-Group-Nordics/events/218754241/> * Dec 09 - 11, 2014 <http://bitex.bh/> Bitex 2014 <http://bitex.bh/> Bahrain, BH <http://bitex.bh/> * Dec 11 - 12, 2014 <http://www.e-side.co.jp/okinawaopendays/2014/en.html> Okinawa Open Days 2014 <http://www.e-side.co.jp/okinawaopendays/2014/en.html> Naha, Okinawa, JP <http://www.e-side.co.jp/okinawaopendays/2014/en.html> * Apr 13 - 14, 2015 <http://www.percona.com/live/openstack-live-2015/> OpenStack Live <http://www.percona.com/live/openstack-live-2015/> Santa Clara, CA, US <http://www.percona.com/live/openstack-live-2015/> * May 18 - 22, 2015 <https://www.openstack.org/summit/vancouver-2015/> OpenStack Summit May 2015 <https://www.openstack.org/summit/vancouver-2015/> Vancouver, BC <https://www.openstack.org/summit/vancouver-2015/> * Sep 17, 2015 <http://www.openstackbeneluxconference.nl/> OpenStack Benelux Conference 2015 <http://www.openstackbeneluxconference.nl/> Bussum, NL <http://www.openstackbeneluxconference.nl/> Other News * Horizon topics during Kilo development summit <https://www.mirantis.com/blog/horizon-topics-kilo-development-summit/> * OpenStack Series: Part 16 – Ceph in OpenStack <https://www.mirantis.com/blog/openstack-series-part-16-ceph-openstack/> * OpenStack Users are Ready to Move From Hypervisors <http://cloudtweaks.com/2014/11/openstack-users-ready-move-hypervisors/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-11-25-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-11-25-21.…>. Got Answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * OpenVswitch module not found in SLES 11 SP3 installation <https://ask.openstack.org/en/question/54676/openvswitch-module-not-found-in…> * What is the difference between juju and heat? <https://ask.openstack.org/en/question/54652/what-is-the-difference-between-…> * what configuration should be made in neutron during ironic installation <https://ask.openstack.org/en/question/54397/what-configuration-should-be-ma…> * What is the "share network" in manila? And is it necessary to all drivers? <https://ask.openstack.org/en/question/54356/what-is-the-share-network-in-ma…> Welcome New Reviewers, Developers and Core Reviewers yoan desbordes <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> 刘军卫 <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Cedric Dos Santos <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> ZhangYang <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Praveen Kumar <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Bharat Kumar Kobagana <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Bharat Kumar Kobagana <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> zhu.rong <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Einst Crazy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Danny Wilson <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> kulafenghen <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> ice.yao <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Maxime Leroy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Kai Qiang Wu <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ikuo Kumagai <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Naohiro Tamura <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> coding1314 <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Dingyx <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> xhzhf <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Jan Kundrát <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (Nov 14 - 21)
by Stefano Maffulli 22 Nov '14

22 Nov '14

1 0

[OSSA 2014-039] Neutron DoS through invalid DNS configuration (CVE-2014-7821)
by Tristan Cacqueray 20 Nov '14

20 Nov '14

OpenStack Security Advisory: 2014-039 CVE: CVE-2014-7821 Date: November 19, 2014 Title: Neutron DoS through invalid DNS configuration Reporter: Henry Yamauchi, Charles Neill and Michael Xin (Rackspace) Products: Neutron Versions: up to 2014.1.3 and 2014.2 Description: Henry Yamauchi, Charles Neill and Michael Xin from Rackspace reported a vulnerability in Neutron. By configuring a maliciously crafted dns_nameservers an authenticated user may crash Neutron service resulting in a denial of service attack. All Neutron setups are affected. Kilo (development branch) fix: https://review.openstack.org/135616 Juno fix: https://review.openstack.org/135623 Icehouse fix: https://review.openstack.org/135624 Notes: This fix will be included in future 2014.1.4 and 2014.2.1 releases. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7821 https://launchpad.net/bugs/1378450 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Post Paris)
by Stefano Maffulli 15 Nov '14

15 Nov '14

1 0

[OSSA 2014-038] Nova network DoS through API filtering (CVE-2014-3708)
by Tristan Cacqueray 29 Oct '14

29 Oct '14

OpenStack Security Advisory: 2014-038 CVE: CVE-2014-3708 Date: October 28, 2014 Title: Nova network DoS through API filtering Reporter: Mohammed Naser (Vexxhost) Products: Nova Versions: up to 2014.1.3, and 2014.2 Description: Mohammed Naser from Vexxhost reported a vulnerability in Nova API filters. By listing active servers using an ip filter, an authenticated user may overload nova-network or neutron-server process, resulting in a denial of services. All Nova setups are affected. Kilo (development branch) fix: https://review.openstack.org/131460 Juno fix: https://review.openstack.org/131462 Icehouse fix: https://review.openstack.org/131461 Notes: This fix will be included in future 2014.1.4 and 2014.2.1 releases. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3708 https://launchpad.net/bugs/1358583 --· Tristan Cacqueray OpenStack Vulnerability Management Team

1 0