- OpenStack-announce - lists.openstack.org

[OSSA 2013-018] Missing SSL certificate check in Python glance client (CVE-2013-4111)
by Thierry Carrez 30 Jul '13

30 Jul '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-018 CVE: CVE-2013-4111 Date: July 30, 2013 Title: Missing SSL certificate check in Python glance client Reporter: Thomas Leaman (HP) Products: python-glanceclient Affects: All versions Description: Thomas Leaman from HP reported that the Python Glance client was failing to properly check certificates during the establishment of HTTPS connections. A remote attacker with access over segments of the network between client and server could potentially set up a man-in the-middle attack and access the contents of the Glance client request (or response). python-glanceclient fix (will be included in a future release): https://review.openstack.org/#/c/33464/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4111 https://bugs.launchpad.net/python-glanceclient/+bug/1192229 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJR98rhAAoJEFB6+JAlsQQjm30P/3zp1YGzDb30pSOcfKz683VR KGYEoRUx3wPLMCC5Vzl4y63xwrl7nrarKNj6VeyU/JUzBVhlIa/MHgIkrBzNDPkj 9yewE6ITihnbRfYIp/u+QnXkX0IgNsfeLPL5DW6qgV4aKRVZQdz0TcTjbQrhDQiV iEVEEq1lZVMwP5Oah38YVxWg5EmL+9vmMqfkcXpWsMa1I2yWcw0YN5m4QqHw5BcD GGeagHDZIQ+nxzpWd67E/OV946uHrhshCRZq+o3lZoGSv1C33bpkcDoruskDYvUm gKtwD63/ifHmXnti8TVNaX9D80C2NdSPzAUFNa/Akht5b/VIzuhqvUDECernDckx UBOYjXsTFVfFkqFYLE+Xderm6iTAX4mC8yCdIEONLRVdZGNMWk4WVPjJ4vhpUUNA uTaFq+csTbwH/DttbxlniiEbJAhoTPAHDKmwzwStTBVIc6mbxeF72vx9GBV6Hx9x 7qA+Hn5otlSWt8WbqU6K14ypFQRwjtswfY38ZZ9YkAQFFnI/dEUWp5P/Ld8JaiiQ RQU6h/m3crdaeoATK020TK2QZBjUAVgLARFNAL2UT3IwfmZixJAsuWn5QfGPHojI PYjdutW1VlBhL8ak8oN/Q2pzkho/ufR9czSMGN35X3U/7db87OrG/0gz8Rp5FZVH diSr4/bWdzDrbfkY/sCI =v33d -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (July 19 – 26)
by Stefano Maffulli 27 Jul '13

27 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> Need support to travel to Hong Kong? The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> What is OpenStack Core? <http://robhirschfeld.com/2013/07/22/kicking-off-core/> OpenStack Foundation board member Rob Hirschfeld <http://robhirschfeld.com/> posted a series of short essays to spark a discussion around defining OpenStack Core. His latest post Twelve straw man positions to frame OpenStack “what is core” discussion <http://robhirschfeld.com/2013/07/24/what-is-core-strawman/> moves to the ‘What’ is core from the /how / <http://robhirschfeld.com/2013/07/23/introducing-the-openstack-spider-graph-…>and/why/ <http://robhirschfeld.com/2013/07/22/making-openstack-meaningful/>. The twelve positions have been crafted over the course of several weeks and are constantly evolving. Next steps are to expand discussions to the OpenStack Community for input and review at the next Board Meeting on August 6th <https://wiki.openstack.org/wiki/Governance/Foundation#Proposed_2013_Board_M…>. Ultimately, we need to close this issue at the next Summit <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/>. To the first OpenStack Documentation BootCamp <http://www.openstack.org/blog/2013/07/to-the-first-openstack-documentation-…> The OpenStack Docs Bootcamp offers a deep dive into the technical tools, workflows, and processes we use to create docs.openstack.org <http://docs.openstack.org/> and api.openstack.org <http://api.openstack.org/>. Our goal is to give enough information that will create sustaining new core members of OpenStack Documentation. You can register to attend through this form <https://docs.google.com/forms/d/1JwBinyXO1dQq_DbtRTrWeK1c7E8iwnGFZ1kgSrL4v7…>. More details on the OpenStack wiki <https://wiki.openstack.org/wiki/Docs_Bootcamp_2013>. OpenStack Hits a Triple with OpenStack on OpenStack <https://blog.hpcloud.com/openstack-hits-triple-openstack-openstack> On the 16th July the OpenStack Technical Committee voted <https://lists.launchpad.net/openstack/msg25222.html> to make OpenStack Deployment <https://wiki.openstack.org/wiki/TripleO> an official OpenStack Program <https://wiki.openstack.org/wiki/Programs>. Our mission is to “Develop and maintain tooling and infrastructure able to deploy OpenStack in production, using OpenStack itself wherever possible.” For the latest code and documentation visit our incubator repository at https://github.com/openstack/tripleo-incubator. OpenStack Deployment (TripleO) was started by HP as part of our active contribution to OpenStack, in order to fill in core gaps in delivering OpenStack to users. Openstack General List Migration <http://markmail.org/message/66izocadk4f5jp2q> Update your filters: starting from now the OpenStack General list openstack(a)lists.launchpad.net <mailto:openstack@lists.launchpad.net> has become openstack(a)lists.openstack.org <mailto:openstack@lists.openstack.org>. We have almost completed the move of all OpenStack mailing lists to our mailman installation on http://lists.openstack.org <http://lists.openstack.org/>. There are some known issues still to be removed, though. Please bear with us while we fix them. Thanks to Paul Hummer and the whole Launchpad team at Canonical for making this migration happen. Tips ‘n Tricks * By Adam Young <http://adam.younglogic.com/>: Troubleshooting PKI token issues in auth_token middleware. <http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/> * By Fabien Boucher <http://blog.fsquat.net/>: Swift ACL usage examples <http://blog.fsquat.net/?p=40> * By eNovance <http://www.enovance.com/>: How to use temporary urls with Swift <http://www.enovance.com/fr/blog/5828/how-to-use-temporary-urls-with-swift> * By Dan Smith <http://www.danplanet.com/blog>: A brief overview of Nova’s new object model (Part 3) <http://www.danplanet.com/blog/2013/07/20/a-brief-overview-of-novas-new-obje…> Upcoming Events * PuppetConf <http://puppetconf2013.eventbrite.com/?discount=OpenStack>, August 22, San Francisco, CA, Details <http://puppetconf2013.eventbrite.com/?discount=OpenStack> (20% discount to OpenStack community) * 2nd OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/>Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * OpenStack test event at FLOCK — Fedora Contributor’s conference (AUG 9-12) <http://kashyapc.wordpress.com/2013/07/26/openstack-test-event-at-flock-fedo…> Other News * Savanna 0.2 release details and screencast <http://markmail.org/message/7tn4kgtobulkhfgg> * Open Mic Spotlight: Brian Elliott <http://www.openstack.org/blog/2013/07/open-mic-spotlight-brian-elliott/> * Open Mic Spotlight: Chuck Thier <http://www.openstack.org/blog/2013/07/open-mic-spotlight-chuck-thier/> * Open Mic Spotlight: Devananda van der Veen <http://www.openstack.org/blog/2013/07/open-mic-spotlight-devananda-van-der-…> * Open Mic Spotlight: Pádraig Brady <http://www.openstack.org/blog/2013/07/open-mic-spotlight-padraig-brady/> * Open Mic Spotlight: Edgar Magaña Perdomo <http://www.openstack.org/blog/2013/07/open-mic-spotlight-edgar-magana-perdo…> * OpenStack at large in open source: Voices from OSCON 2013 <http://www.mirantis.com/blog/openstack-opensource-voices-oscon-2013/> * Crowbar lays it all out: RAID & BIOS configs officially open sourced <http://robhirschfeld.com/2013/07/23/raid-bios-open/> * OpenStack Project Technical Lead Interview Series #6: Anne Gentle, OpenStack Community Documentation Coordinator <http://www.mirantis.com/blog/openstack-project-technical-lead-interview-ser…> * OpenStack Project Meeting: didn’t happen this week Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * When creating a volume from an image, openstack always uses root disk space? <https://ask.openstack.org/question/2331/when-creating-a-volume-from-an-imag…> * whats the difference between Policies stored in policy.json and policies that can be created using openstack/identity/v3/policies <https://ask.openstack.org/question/3073/whats-the-difference-between-polici…> * What’s the recommended way to debug LDAP connections to Keystone? <https://ask.openstack.org/question/1237/whats-the-recommended-way-to-debug-…> * How to setup security groups for IPv6 with nova-network? <https://ask.openstack.org/question/1520/how-to-setup-security-groups-for-ip…> * how does quantum (network-type: vlan) configure ESX-host VMs? <https://ask.openstack.org/question/1584/how-does-quantum-network-type-vlan-…> * How to configure multiple Floating IP pools? <https://ask.openstack.org/question/1980/how-to-configure-multiple-floating-…> * how to install healthnmon on grizzly ? <https://ask.openstack.org/question/2405/how-to-install-healthnmon-on-grizzl…> * What causes keystone to throw UnicodeEncodeError using devstack? <https://ask.openstack.org/question/2807/what-causes-keystone-to-throw-unico…> * Openstack services cannot talk to RabbitMQ: Connection refused but log says unreachable? <https://ask.openstack.org/question/3027/openstack-services-cannot-talk-to-r…> * IPv6 Support in Grizzly? <https://ask.openstack.org/question/3168/ipv6-support-in-grizzly/> * How to set domain name in quantum <https://ask.openstack.org/question/3185/how-to-set-domain-name-in-quantum/> * ceilometer can’t get compute.instance.create.start/.end instance <https://ask.openstack.org/question/2179/ceilometer-cant-get-computeinstance…> * Is sluggish performance caused by scheduler startup errors? <https://ask.openstack.org/question/1238/is-sluggish-performance-caused-by-s…> * How can I have a VM mounting more than one disk image? <https://ask.openstack.org/question/1448/how-can-i-have-a-vm-mounting-more-t…> * Is it possible to create multiple networks in FLATDHCP mode? <https://ask.openstack.org/question/2091/is-it-possible-to-create-multiple-n…> * What’s the best guide to follow to install Openstack using Xen and Libvirt? <https://ask.openstack.org/question/2015/whats-the-best-guide-to-follow-to-i…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Alistair Coles, HP * Thomas Leaman, HP * Jeff Sloyer, IBM * Adin Scannell, Gridcentric * Sirushti Murugesan, None * Cyril Roelandt, Enovance * Gabriel Wainer, HP * Liang Bo, 99cloud * Zhang Jinnan, 99cloud * Alexander Gorodnev, Mirantis * Ashley McNamara, None * Bill Owen, IBM * Jun Park, EIG/Bluehost * Claxton Correya, Rackspace * Kashi Reddy, Rackspace * Jon Snitow, Swiftstack * Sriram Madapusi Vasudevan, Rackspace * Sysnet, unknown * Anju Tiwari, None /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (July 12 – 19)
by Stefano Maffulli 19 Jul '13

19 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> Need support to travel to Hong Kong? The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> OpenStack Celebrates Three Years! <http://www.openstack.org/blog/2013/07/openstack-celebrates-three-years/> OpenStack is no one person or company or idea or line of code. It derives its strength from the collective community. No matter when you joined or what role you play, you have the ability to shape the future of OpenStack and computing. In three short years since the community was established, OpenStack has truly become the center of cloud innovation, attracting hundreds of talented developers, brand-name users, and support from major industry leaders. This calls for a big toast to you, the OpenStack community! A Vision for Keystone <http://adam.younglogic.com/2013/07/a-vision-for-keystone/> As OpenStack evolves, its requirements for Identity Management evolve with it. In the early days, there was a single Nova server, and that stored user-id and password. Once OpenStack evolved into a body of servers, copying passwords around comprised too big a security risk. Keystone was first implemented as a central repository for those passwords. Adam Young <http://adam.younglogic.com/> writes in fine details what the plans are for the future of the OpenStack Identity Management service. Glance Registry Driver <http://blog.flaper87.org/post/51e47d110f06d35a218b0307/> A lot is going on on Glance lately, although you may have not noticed. The team has been working on several blueprints, and most of them aim to promote glance as a public service. Flavio Percoco <http://blog.flaper87.org/> has published an update of what’s cooking in OpenStack Image Service. Tips ‘n Tricks * By Sébastien Han <http://sebastien-han.fr/>: OpenStack: instance evacuation goes to host <http://sebastien-han.fr/blog/2013/07/19/openstack-instance-evacuation-goes-…> * By Chmouel Boudjnah <http://blog.chmouel.com/>: Quick Swift Tip: How to remove a header with Curl <http://blog.chmouel.com/2013/07/17/quick-swift-tip-how-to-remove-a-header-w…> * By Victoria Martínez de la Cruz <http://vmartinezdelacruz.com/>: Getting started with Marconi, the message queue for OpenStack <http://vmartinezdelacruz.com/getting-started-with-marconi-the-message-queue…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: Configuring Libvirt guests with an Open vSwitch bridge <http://kashyapc.wordpress.com/2013/07/13/configuring-libvirt-guests-with-an…> Upcoming Events * Lots of birthday celebrations near you: Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> * OpenStack Meeting at “One Convergence” <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> Jul 21, 2013 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> * Gluster Community Workshop @ PDX <http://glusterday-pdx.eventbrite.com/>, Jul 22 – 26, 2013 – Portland, OR Details <http://glusterday-pdx.eventbrite.com/> * 2nd OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/> Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * Infrastructure Bootcamp <http://www.openstack.org/blog/2013/07/infrastructure-bootcamp/> Other News * python-heatclient 0.2.3 released <http://lists.openstack.org/pipermail/openstack-announce/2013-July/000119.ht…> * Havana-2 development milestone available <http://lists.openstack.org/pipermail/openstack-announce/2013-July/000120.ht…> * Savanna 0.2 released: Bring on the new Hadoop on OpenStack features! <http://www.mirantis.com/blog/savanna-0-2-released-new-hadoop-on-openstack-f…> * Open Mic Spotlight: Elizabeth Krumbach Joseph <http://www.openstack.org/blog/2013/07/open-mic-spotlight-elizabeth-krumbach…> * Open Mic Spotlight: Diane Fleming <http://www.openstack.org/blog/2013/07/open-mic-spotlight-diane-fleming/> * Open Mic Spotlight: Anne Gentle <http://www.openstack.org/blog/2013/07/open-mic-spotlight-anne-gentle/> * Open Mic Spotlight: Clint Byrum <http://www.openstack.org/blog/2013/07/open-mic-spotlight-clint-byrum/> * Open Mic Spotlight: Wayne Walls <http://www.openstack.org/blog/2013/07/open-mic-spotlight-wayne-walls/> * Erasure Codes with OpenStack Swift – Digging Deeper <http://swiftstack.com/blog/2013/07/17/erasure-codes-with-openstack-swift-di…> * OpenStack Project Technical Lead Interview Series #5: Julien Danjou, OpenStack Ceilometer Project <http://www.mirantis.com/blog/openstack-project-technical-lead-interview-ser…> * Three Years and Some with OpenStack <https://blog.hpcloud.com/three-years-and-some-openstack> * Quality Of Service In OpenStack <https://tropicaldevel.wordpress.com/2013/07/15/quality-of-service-in-openst…> * Interview with Nikola Dipanov from Red Hat <http://rafstack.tumblr.com/post/55505012951> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-16-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-16-21.…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * What are the best ways to monitor OpenStack Swift? <https://ask.openstack.org/question/3245/what-are-the-best-ways-to-monitor-o…> * How to change status of a Neutron port from DOWN to ACTIVE? <https://ask.openstack.org/question/3239/how-to-change-status-of-a-neutron-p…> * How to modify X-Auth-Token life time in keystone? <https://ask.openstack.org/question/3233/how-to-modify-x-auth-token-life-tim…> * Where does shared storage typically reside for guest filesystems? <https://ask.openstack.org/question/3213/where-does-shared-storage-typically…> * Non-Ubuntu Images from VirtualBox not running correctly <https://ask.openstack.org/question/3208/non-ubuntu-images-from-virtualbox-n…> * remove public quantum network <https://ask.openstack.org/question/3207/remove-public-quantum-network/> * Failed to update the root certificate: cacert.pem ERROR: Unauthorized (HTTP 401) <https://ask.openstack.org/question/3205/failed-to-update-the-root-certifica…> * Errors running ceilometer-collector <https://ask.openstack.org/question/3196/errors-running-ceilometer-collector/> * Get the NAT IP from openstack using chef <https://ask.openstack.org/question/3187/get-the-nat-ip-from-openstack-using…> * VCPU-Hours incorrectly reported in Dashboard? <https://ask.openstack.org/question/3148/vcpu-hours-incorrectly-reported-in-…> * how to boot an instance with always the same ip and hostname <https://ask.openstack.org/question/3159/how-to-boot-an-instance-with-always…> * IPv6 Support in Grizzly? <https://ask.openstack.org/question/3168/ipv6-support-in-grizzly/> * How to set domain name in quantum <https://ask.openstack.org/question/3185/how-to-set-domain-name-in-quantum/> * Access to metadata fails: couldn’t connect to host <https://ask.openstack.org/question/3145/access-to-metadata-fails-couldnt-co…> * Can I migrate VM between two datacenters with openstack <https://ask.openstack.org/question/3124/can-i-migrate-vm-between-two-datace…> * Not getting Keystone token via http but am getting it thru keystone client <https://ask.openstack.org/question/3117/not-getting-keystone-token-via-http…> * how to get the details of a hyper-visor in open stack environment via Openstack Java SDK? <https://ask.openstack.org/question/3018/how-to-get-the-details-of-a-hyper-v…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Guangya Liu, IBM * Yang Hongyang <http://www.openstack.org/community/members/profile/10122>, None * QingXin Meng <http://www.openstack.org/community/members/profile/9444>, IBM * Yuliya Portnova <http://www.openstack.org/community/members/profile/5841>, Mirantis (or Yulia Portnova <http://www.openstack.org/community/members/profile/10006>?) * Pavel Kirpichyov <http://www.openstack.org/community/members/profile/10496>, None * Elena Ezhova <http://www.openstack.org/community/members/profile/9464>, Mirantis * Hyunsun Moon <http://www.openstack.org/community/members/profile/9723>, None * Joel Coffman <http://www.openstack.org/community/members/profile/8788>, John Hopkins University Applied Physics Lab /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

Havana-2 development milestone available
by Thierry Carrez 18 Jul '13

18 Jul '13

Hi everyone, The second milestone of the Havana development cycle, "havana-2" is now available for Keystone, Glance, Nova, Horizon, Neutron, Cinder, Ceilometer, and Heat. In the last 7 weeks, more than 100 features were added and more than 650 bugs fixed. You can see the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/havana/havana-2 https://launchpad.net/glance/havana/havana-2 https://launchpad.net/nova/havana/havana-2 https://launchpad.net/horizon/havana/havana-2 https://launchpad.net/neutron/havana/havana-2 https://launchpad.net/cinder/havana/havana-2 https://launchpad.net/ceilometer/havana/havana-2 https://launchpad.net/heat/havana/havana-2 The next (and last) development milestone of the Havana cycle, havana-3, is scheduled for September 6th (final release is planned October 17th). Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

python-heatclient 0.2.3 released
by Steve Baker 16 Jul '13

16 Jul '13

The heat development community would like to announce the release of python-heatclient version 0.2.3. python-heatclient is a client library for Heat built on the Heat orchestration API. It provides a Python API (the heatclient module) and a command-line tool (heat). This release can be installed from the following locations: http://tarballs.openstack.org/python-heatclient/python-heatclient-0.2.3.tar… https://pypi.python.org/pypi/python-heatclient/0.2.3 The following issues are fixed in this release: #1183842 (Sulochan Acharya) cannot handle "=" in parameters #1190111 (Bryan D. Payne) python-ceilometerclient fails to talk to HTTPS endpoints #1200214 (Dirk Mueller) Relax OpenStack upper capping of client versions #1172444 (Monty Taylor) migrate all projects to flake8 #1177924 (Steve Baker) Use testr instead of nose as the unittest runner. #1179007 (Monty Taylor) Migrate build system to pbr #1179008 (Steven Dake) rename requires files to standard names

1 0

OpenStack Community Weekly Newsletter (July 5 – 12)
by Stefano Maffulli 12 Jul '13

12 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ????????> <http://openstacksummitnovember2013.eventbrite.com/> The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> The OpenStack Foundation announces the availability of travel grants under the OpenStack Travel Support Program. The program’s aim is to facilitate participation of key contributors to the OpenStack Design Summit covering costs for travel and accommodation. The Travel Support Program is based on the promise of Open Design <https://wiki.openstack.org/wiki/Open>, one of the founding principles upon which the OpenStack project is built. Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> OpenStack will celebrate it’s third birthday July 19, and we’re celebrating this month! In three short years, Openstack has truly emerged as the center of cloud innovation, with hundreds of companies around the world relying on OpenStack to run their business. OpenStack is maturing, it’s coming of age and new users being announced every week (Fidelity, Comcast, Best Buy, Bloomberg). Over the past three years, we’ve also seen OpenStack grow internationally. There are now over 40 global user groups and more than 10,000 community members across 121 countries. And we’ve recently crossed the 1,000 authors threshold to the code base. This calls for a big toast to the OpenStack community! A tool for watching Zuul and Jenkins <http://www.danplanet.com/blog/2013/07/10/a-tool-for-watching-zuul-and-jenki…> Dan Smith <http://www.danplanet.com/blog> wrote a very hacky text “dashboard” that merges the information from Gerrit and Zuul, and provides a periodically-refreshed view of what is going on. The tool is useful to keep close watch of patches, both to know when they’re close to merging, as well as to know early when they’re failing a test. Catching something early and pushing a fix will kill the job currently in progress and start over with the new patch. This is a more efficient use of resources and lowers the total amount of time before Jenkins will vote on the patch in such a case. Save Space: the final frontier – Erasure Codes with OpenStack Swift <http://swiftstack.com/blog/2013/07/10/erasure-codes-with-openstack-swift/> The Swift team announced an initiative to introduce erasure codes in OpenStack Swift. This initiative enables deployers to store data with erasure coding instead of or in addition to Swift’s 3-replica model. OpenStack Programs Core Developers <http://dowdberry.blogspot.com/2013/07/openstack-programs-core-developers.ht…> David Medberry <http://dowdberry.blogspot.com/search/label/openstack> wrote a nice summary of how to identify core developers for each of the Official OpenStack Programs <https://wiki.openstack.org/wiki/Programs>. This list is maintained on Gerrit for Nova <https://review.openstack.org/#/admin/groups/25,members>, Glance <https://review.openstack.org/#/admin/groups/13,members>, Swift <https://review.openstack.org/#/admin/groups/24,members>, Horizon <https://review.openstack.org/#/admin/groups/43,members>, Keystone <https://review.openstack.org/#/admin/groups/9,members>, Cinder <https://review.openstack.org/#/admin/groups/83,members>, Neutron <https://review.openstack.org/#/admin/groups/38,members>, Ceilometer <https://review.openstack.org/#/admin/groups/107,members>, Heat <https://review.openstack.org/#/admin/groups/114,members> and OpenStack Doc <https://review.openstack.org/#/admin/groups/30,members>. Tips ‘n Tricks * By Dan Smith <http://www.danplanet.com/blog>: A brief overview of Nova’s new object model (Part 1) <http://www.danplanet.com/blog/2013/07/12/a-brief-overview-of-novas-new-obje…> and (Part 2) <http://www.danplanet.com/blog/2013/07/12/a-brief-overview-of-novas-new-obje…> * By Mirantis <http://www.mirantis.com/>: Understanding OpenStack Authentication: Keystone PKI <http://www.mirantis.com/blog/understanding-openstack-authentication-keyston…> * By Sandro Mathys <http://www.blog.sandro-mathys.ch/search/label/OpenStack>: Setting a user password when launching cloud images <http://www.blog.sandro-mathys.ch/2013/07/setting-user-password-when-launchi…> * By Julie Pichon <http://www.jpichon.net/tag/openstack/>: Testing in Horizon | Unit testing for the Openstack Dashboard <http://www.jpichon.net/blog/2013/07/testing-in-horizon/> Upcoming Events * Boston OpenStack Meetup <http://www.meetup.com/Openstack-Boston/> Jul 16, 2013 – Boston Details <http://www.meetup.com/Openstack-Boston/> * 1st Openstack Athens User Group meeting <http://www.meetup.com/Athens-OpenStack-User-Group/events/128046962/> Jul 17, 2013 – Athens, Greece Details <http://www.meetup.com/Athens-OpenStack-User-Group/events/128046962/> * Lots of birthday celebrations near you: Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> * OpenStack Meeting at “One Convergence” <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> Jul 21, 2013 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> * Gluster Community Workshop @ PDX <http://glusterday-pdx.eventbrite.com/>, Jul 22 – 26, 2013 – Portland, OR Details <http://glusterday-pdx.eventbrite.com/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * OpenStack at FISL 2013 Brasil <http://www.openstack.org/blog/2013/07/openstack-at-fisl-2013-brasil/> * Hong Kong OpenStack 2nd Workshop: Deploy a 3D Virtual World on OpenStack <http://www.openstack.org/blog/2013/07/hong-kong-openstack-2nd-workshop-depl…> * 2d Polish OpenStack User Group Meetup <https://www.youtube.com/watch?v=h4HVEG3lo-g&feature=c4-feed-u> Other News * Ansible playbooks for OpenStack <http://markmail.org/message/dy4g2hjbrocshnso> * Caimito 0.11 – WebDAV frontend for OpenStack Swift Cloud Storage <http://markmail.org/message/uoqfvdhe2yxik4yr> * New mailing lists in Italian, Spanish, Vietnamese <http://markmail.org/message/plxo2r2jpv4tn3qe> * Open Mic Spotlight: Joe Topjian <http://www.openstack.org/blog/2013/07/open-mic-spotlight-joetopjian/> * Open Mic Spotlight: Mike Perez <http://www.openstack.org/blog/2013/07/open-mic-spotlight-mike-perez/> * Open Mic Spotlight: Aaron Rosen <http://www.openstack.org/blog/2013/07/open-mic-spotlight-aaron-rosen/> * Open Mic Spotlight: Joe Gordon <http://www.openstack.org/blog/2013/07/open-mic-spotlight-joe-gordon/> * Open Mic Spotlight: Everett Toews <http://www.openstack.org/blog/2013/07/open-mic-spotlight-everett-toews/> * Open Mic Spotlight: Doug Hellmann <http://www.openstack.org/blog/2013/07/open-mic-spotlight-doug-hellmann/> * Python Exception Chaining <http://blogs.gnome.org/markmc/2013/07/11/python-exception-chaining/> * Save Space: the final frontier – Erasure Codes with OpenStack Swift <http://swiftstack.com/blog/2013/07/10/erasure-codes-with-openstack-swift/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-09-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-09-21.…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Where is the right place to set the default quota? <https://ask.openstack.org/question/3030/where-is-the-right-place-to-set-the…> * ceilometer and instance snapshots/glance images <https://ask.openstack.org/question/2999/ceilometer-and-instance-snapshotsgl…> * Debugging OpenStack Swift with Eclipse and Pydev <https://ask.openstack.org/question/2997/debugging-openstack-swift-with-ecli…> * Cinder custom driver for falconstor <https://ask.openstack.org/question/2998/cinder-custom-driver-for-falconstor/> * Terms of support for x-glance-api-copy-from header in Glance API <https://ask.openstack.org/question/2974/terms-of-support-for-x-glance-api-c…> * creating isolated networks in grizzly with nova-network <https://ask.openstack.org/question/2949/creating-isolated-networks-in-grizz…> * cinder-volume localhost:5672 unreachable <https://ask.openstack.org/question/2933/cinder-volume-localhost5672-unreach…> * Build MySQL HA on openstack <https://ask.openstack.org/question/2946/build-mysql-ha-on-openstack/> * Openstack services cannot talk to RabbitMQ: Connection refused but log says unreachable? <https://ask.openstack.org/question/3027/openstack-services-cannot-talk-to-r…> * how to get the details of a hyper-visor in open stack environment via Openstack Java SDK? <https://ask.openstack.org/question/3018/how-to-get-the-details-of-a-hyper-v…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (June 28 - July 5)
by Stefano Maffulli 05 Jul '13

05 Jul '13

Hong Kong Summit -- Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> OpenStack Object Storage (Swift) 1.9.0 released <http://lists.openstack.org/pipermail/openstack-dev/2013-July/011221.html> This week the team announced the latest release of OpenStack Object Storage, Swift 1.9.0. The new version added lots of major features thanks to the combined effort of 37 different contributors. Full release notes <https://github.com/openstack/swift/blob/master/CHANGELOG> and download. <https://launchpad.net/swift/havana/1.9.0> OpenStack meets Lisp: cl-openstack-client <http://julien.danjou.info/blog/2013/lisp-and-openstack-with-cl-openstack-cl…> A month ago, a mail hit the OpenStack <http://openstack.org/> mailing list entitled "The OpenStack Community Welcomes Developers in All Programming Languages <https://lists.launchpad.net/openstack/msg24349.html>". Julien Danjou <http://julien.danjou.info/blog/> has interpreted that as a challenge and in pure hacker spirit he brought Lisp into OpenStack. Welcome cl-openstack-client <https://github.com/stackforge/cl-openstack-client>, the OpenStack client library for Common Lisp <http://common-lisp.net/>! Introducing the Open Mic Series <http://www.openstack.org/blog/2013/07/introducing-the-open-mic-series/> We're excited to introduce the OpenStack Open Mic series, where we'll be spotlighting technical contributors across our global community during the month of July to celebrate OpenStack's 3rd birthday. If you are an OpenStack contributor and would like to participate, please check out the instructions and questions <https://etherpad.openstack.org/fivequestions>, otherwise follow along to learn more about our community! OpenStack Security Guide now available! <http://www.openstack.org/blog/2013/07/openstack-security-guide-now-availabl…> The legendary book sprint method has come through again! This past week in a bunker, I mean, secure location near Annapolis, a team of security experts got together to write the /OpenStack Security Guide/. Download the epub file <http://aa4698cc2bf4ab7e5907-ed3df21bb39de4e57eec9a20aa0b8711.r41.cf2.rackcd…> and start reading. The OpenStack Marketing portal <http://www.openstack.org/marketing> Looking for the latest presentation decks? Official logo? Do you have questions on how to use the OpenStack brand? Need quotes for your press release? Answers to these and more questions can be found on the new OpenStack Marketing portal. The new OpenStack Internationalization team <https://wiki.openstack.org/wiki/I18nTeam> The mission of the OpenStack I18N team is to make OpenStack ubiquitously accessible to people of all language backgrounds, by providing a framework to create high quality translations, recruiting contributors and actively managing and planning the translation process. The team has a new mailing list openstack-i18n(a)list.openstack.org <mailto:openstack-i18n@list.openstack.org>, hangs out on #openstack-translation and holds regular meetings <https://wiki.openstack.org/wiki/Meetings/I18nTeamMeeting>. Tips 'n Tricks * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: Unattended F19 guest creation with Oz <http://kashyapc.wordpress.com/2013/07/04/unattended-f19-guest-creation-with…> * By Mirantis <http://www.mirantis.com/>: OpenStack Metering Using Ceilometer <http://www.mirantis.com/blog/openstack-metering-using-ceilometer/> * By Michael Still <http://www.stillhq.com/>: Nova database continuous integration <http://www.stillhq.com/openstack/000015.html> * By Sébastien Han <http://sebastien-han.fr/>: OpenStack: perform a live migration using a specific NIC <http://sebastien-han.fr/blog/2013/07/02/openstack-perform-a-live-migration-…> * By John Bresnahan <https://tropicaldevel.wordpress.com/>: tempest devstack and bugs oh my! <https://tropicaldevel.wordpress.com/2013/06/29/tempest-devstack-and-bugs-oh…> Upcoming Events * 2nd OpenStack User Group Meeting <http://www.meetup.com/OpenStack-User-Group-Poland/events/123417122/> Jul 11, 2013 -- Szczecin, Poland Details <http://www.meetup.com/OpenStack-User-Group-Poland/events/123417122/> * Boston OpenStack Meetup <http://www.meetup.com/Openstack-Boston/> Jul 16, 2013 -- Boston Details <http://www.meetup.com/Openstack-Boston/> * OpenStack Meeting at "One Convergence" <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> Jul 21, 2013 -- Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 -- 26, 2013 -- Portland, OR Details <http://www.oscon.com/oscon2013> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 -- Oct 01, 2013 -- Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * We played Doom 3 at the first Rhone-Alpes OpenStack Meet-UP <http://xlcloud.org/bin/view/Blog/We+played+Doom+3+at+the+first+Rhone-Alpes+…> * OpenStack Rhône-Alpes Meet-up #1 <http://www.vuntz.net/journal/post/2013/07/01/OpenStack-Rh%C3%B4ne-Alpes-Mee…> * OpenStack Infrastructure Bootcamp in NYC <http://princessleia.com/journal/?p=8229> * OpenStack Infrastructure Bootcamp <http://dague.net/2013/06/29/openstack-infrastructure-bootcamp/> Other News * Fedora 19 released, now with official cloud images <http://www.blog.sandro-mathys.ch/2013/07/fedora-19-released-now-with-offici…> * Interview with Garima Thockchom from Talligent <http://rafstack.tumblr.com/post/54486469298> * Interview with Yves Fauser at VMware <http://rafstack.tumblr.com/post/54421387247> * Interview with Nicolas Thomas from Canonical <http://rafstack.tumblr.com/post/54338440110> * DreamCon Speaker Series #12: Justin Lund <http://dreamhost.com/dreamscape/2013/06/28/dreamcon-speaker-series-11-justi…> * Informal notes: June 27th OpenStack Foundation Board Meeting <http://blogs.gnome.org/markmc/2013/06/29/june-27th-openstack-foundation-boa…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-02-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-02-21.…> Welcome New Developers * Vijendar Komalla, Rackspace * Kwadronaut * Jason Dunsmore, Rackspace * Nachiappan Veerappan Nachiappan, HP * Jordan Pittier, Cloudwatt * Michael Chapman, Cisco * Thomas Spatzier, IBM * Tomasz Paszkowski, Suse * Anthony Dodd, Vbridges * Simo Sorce, Red Hat * Ashwini Shukla, Rackspace * Haneef Ali, HP * Alexander Gordeev, Mirantis * Daniel L Jones, IBM * Jan Grant, HP * HenryGessau, Cisco Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Uploading files to OpenStack Object Storage (Swift) by many parts <https://ask.openstack.org/question/2880/uploading-files-to-openstack-object…> * openstack-dashboard fails to run with error: settings.DATABASES is improperly configured <https://ask.openstack.org/question/2878/openstack-dashboard-fails-to-run-wi…> * OpenStack Object Storage on 45*3TB servers <https://ask.openstack.org/question/2866/openstack-object-storage-on-453tb-s…> * glance Authorization Failed with Errno 104 <https://ask.openstack.org/question/2882/glance-authorization-failed-with-er…> * keystone UnicodeEncodeError <https://ask.openstack.org/question/2807/keystone-unicodeencodeerror/> * What's the best way to encrypt noVNC viewer in dashboard? <https://ask.openstack.org/question/2831/whats-the-best-way-to-encrypt-novnc…> * What causes Metadata service to be very slow? <https://ask.openstack.org/question/2765/what-causes-metadata-service-to-be-…> * how best to merge swift zone into another? <https://ask.openstack.org/question/2726/how-best-to-merge-swift-zone-into-a…> * ceilometer coercing to Unicode: need string or buffer, NoneType Found <https://ask.openstack.org/question/2646/ceilometer-coercing-to-unicode-need…> * Unable to Ping or SSH after installing RDO <https://ask.openstack.org/question/2719/unable-to-ping-or-ssh-after-install…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[Swift] Swift 1.9.0 released: global clusters and more
by John Dickinson 02 Jul '13

02 Jul '13

I'm pleased to announce that Swift 1.9.0 has been released. This has been a great release with major features added, thanks to the combined effort of 37 different contributors. Full release notes: https://github.com/openstack/swift/blob/master/CHANGELOG Download: https://launchpad.net/swift/havana/1.9.0 Feature Summary =============== Full global clusters support ---------------------------- With this release, Swift fully supports global clusters. A single Swift cluster can now be deployed a wide geographic area (eg across an ocean or continent) and still provide high durability and availability. This feature has four major parts: * Region tier for data placement * Adjustable replica counts * Separate replication network support * Affinity on reads and writes Improvements in disk performance -------------------------------- The object server can now be configured to use threadpools to increase performance and smooth out latency on storage nodes. Also, many disk operations were reordered to increase reliablility and improve performance. This work is a direct result of the design summit sessions in Portland. Support for config directories ------------------------------ Swift now supports conf.d style config directories. This allows config snippets to be managed independently and composed into the full config for a Swift process. For example, a deployer can have a config snippet for each piece of proxy middleware. Multiple TempURL keys --------------------- The TempURL feature (temporary, signed URLs) now supports two signing keys. This allows users to safely rotate keys without invalidating existing signed URLs. Other ----- There's a ton of "other" stuff in this release including features, security fixes, general polishing, and bug fixes. I encourage you to check out the full release notes for more info (https://github.com/openstack/swift/blob/master/CHANGELOG) New Contributors ================ Twelve of the 37 total contributors are first-time contributors to Swift. They are: * Fabien Boucher (fabien.boucher(a)enovance.com) * Brian D. Burns (iosctr(a)gmail.com) * Alex Gaynor (alex.gaynor(a)gmail.com) * Edward Hope-Morley (opentastic(a)gmail.com) * Matthieu Huin (mhu(a)enovance.com) * Shri Javadekar (shrinand(a)maginatics.com) * Sergey Kraynev (skraynev(a)mirantis.com) * Dieter Plaetinck (dieter(a)vimeo.com) * Chuck Short (chuck.short(a)canonical.com) * Dmitry Ukov (dukov(a)mirantis.com) * Vladimir Vechkanov (vvechkanov(a)mirantis.com) * niu-zglinux (Niu.ZGlinux(a)gmail.com) Thank you to everyone who contributed. --John

1 0

OpenStack Community Weekly Newsletter (June 21-28)
by Stefano Maffulli 28 Jun '13

28 Jun '13

Hong Kong Summit -- Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> OpenStack Summit Survey Results <http://www.openstack.org/blog/2013/06/openstack-summit-survey-results/> Key Findings: * *Overall: 96% of people rating the overall Summit as Good or Excellent. * * *Top areas to improve:* Clearly the Network and the Session Rooms (size, acoustics, equipment) were unacceptable. * *Format:* Stackers favored keeping the Design Summit co-located with the rest of the Summit sessions by a margin of 4:1 over breaking it out separately Up for a challenge? Here's the OpenStack Essentials quiz! <http://www.hastexo.com/blogs/florian/2013/06/24/challenge-heres-openstack-e…> Novice, hotshot, expert or wizard? Show off your OpenStack knowledge in this brand new quiz by Florian Haas <http://www.hastexo.com/blogs/florian/tag/openstack/feed>. The *OpenStack Essentials quiz <http://www.hastexo.com/resources/quizzes/openstack-essentials-grizzly>* is a challenging, fun way for you to test your OpenStack knowledge. It takes no more than 30 minutes, or maybe even just 10 if you're super awesome. Python APIs: The best-kept secret of OpenStack <http://www.ibm.com/developerworks/cloud/library/cl-openstack-pythonapis/ind…> As an OpenStack user or administrator, you often need to write scripts to automate common tasks. In addition to the REST and command-line interfaces, OpenStack exposes native Python API bindings. Learn how to use these Python bindings to greatly simplify the process of writing OpenStack automation scripts. An article on DeveloperWorks by Lorin Hochstein <http://www.ibm.com/developerworks/cloud/library/cl-openstack-pythonapis/ind…>, Lead Architect, Cloud Services, Nimbis Services A puppet module for building Windows/Hyper-V OpenStack Compute nodes <https://github.com/ppouliot/ppouliot-openstack-hyper-v> Peter Pouliot <http://www.openstack.org/community/members/profile/311> has been working on a A starting point for building Windows/Hyper-V OpenStack Compute nodes. The modules he recently pushed begin the configuration of a openstack-hyper-v compute node for openstack. It currently has the beginings of both from package and from source options. This is still a work in progress, contributions are welcome. Tips 'n Tricks * By XLcloud <http://xlcloud.org/bin/view/Blog/OpenStack>: Devstack with GRE tunnels in Havana <http://xlcloud.org/bin/view/Blog/Devstack+with+GRE+tunnels+in+Havana?langua…> * By eNovance <http://www.enovance.com/>: Using Duplicity with Cloudwatt for online backups <http://www.enovance.com/fr/blog/5776/using-duplicity-with-cloudwatt-for-onl…> * By Ryan Lane <http://ryandlane.com/blog>: Per-project users and groups (aka service groups) <http://ryandlane.com/blog/2013/06/27/per-project-users-and-groups-aka-servi…> * By Mate Lakat <http://blogs.citrix.com/>: OpenStack -- XenServer -- type Image to Volume <http://blogs.citrix.com/2013/06/27/openstack-xenserver-type-image-to-volume/> * By Logilab <http://www.logilab.org/view?rql=Any%20X%20ORDERBY%20AA%20DESC%20LIMIT%2010%…>: About salt-ami-cloud-builder <http://www.logilab.org/blogentry/145033> * By Giulio Fidente <http://giuliofidente.com/>: OpenStack Glance -- Use Swift as backend <http://giuliofidente.com/2013/06/openstack-glance-use-swift-as-backend.html> Upcoming Events * EuroPython 2013 <https://ep2013.europython.eu/> Jul 01 -- 07, 2013 -- Firenze, Italy Details <https://ep2013.europython.eu/> * FISL 14 <http://softwarelivre.org/fisl14> Jul 03 -- 06, 2013 -- Details <http://softwarelivre.org/fisl14> * PyCon Australia -- OpenStack Miniconf <http://2013.pycon-au.org/programme/schedule/friday> Jul 05, 2013 -- Hobart, Australia Details <http://2013.pycon-au.org/programme/schedule/friday> * Deploying a 3D Virtual World on OpenStack Cloud <http://www.cyberport.hk/campaign/edm/openstack/eDM/eDM2.html> Jul 05, 2013 -- Hong Kong Details <http://www.cyberport.hk/campaign/edm/openstack/eDM/eDM2.html> * Austin Meetup <http://www.meetup.com/OpenStack-Austin/> Jul 11, 2013 -- Austin Details <http://www.meetup.com/OpenStack-Austin/> * Boston Meetup <http://www.meetup.com/Openstack-Boston/> Jul 16, 2013 -- Boston Details <http://www.meetup.com/Openstack-Boston/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 -- 26, 2013 -- Portland, OR Details <http://www.oscon.com/oscon2013> Reports from Previous Events * Report: June month OpenStack meetup, Bangalore , India <http://www.openstack.org/blog/2013/06/report-june-month-openstack-meetupblr…> * Notes suite au 4ème rendez-vous OpenStack à Paris <http://www.logilab.org/blogentry/149644> * OpenStack Italia User Group Meetup, Milan, June 20 <http://www.hastexo.com/blogs/florian/2013/06/25/openstack-italia-user-group…> Other News * What's Up Doc? Jun 21, 2013 <http://lists.openstack.org/pipermail/openstack-docs/2013-June/002014.html> * Interview with Hui Cheng at UnitedStack <http://rafstack.tumblr.com/post/53944775969> * Interview with Joe Arnold, founder and CEO of Swiftstack <http://rafstack.tumblr.com/post/53761752713> * What I think about CephFS in OpenStack <http://sebastien-han.fr/blog/2013/06/24/what-i-think-about-cephfs-in-openst…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-06-25-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-06-25-21.…> * OpenStack Community Meeting: Summary <http://eavesdrop.openstack.org/meetings/openstack_community/2013/openstack_…> and full logs <http://eavesdrop.openstack.org/meetings/openstack_community/2013/openstack_…> * OpenStack Board Meeting Summary -- June 27th <http://lists.openstack.org/pipermail/foundation/2013-June/001435.html> Welcome New Developers * Scott Dangelo, HP * Kai Zhang, Zelin.io * Sai Krishna * Anastasia Latynskaya, Mirantis * Mahesh Panchaksharaiah, Thoughtworks * Sridevi Koushik, Rackspace * Jacob Cherkas, Nicira Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * how to configure IPv6 for openstack <https://ask.openstack.org/question/2599/how-to-configure-ipv6-for-openstack/> * Instances running on VMware ESXi cannot access metadata service <https://ask.openstack.org/question/2650/instances-running-on-vmware-esxi-ca…> * ceilometer coercing to Unicode: need string or buffer, NoneType Found <https://ask.openstack.org/question/2646/ceilometer-coercing-to-unicode-need…> * route fixed ip to floating ip <https://ask.openstack.org/question/2640/route-fixed-ip-to-floating-ip/> * How to query Billingstack after you installed it? <https://ask.openstack.org/question/2621/how-to-query-billingstack-after-you…> * Devstack exercise script failures <https://ask.openstack.org/question/2620/devstack-exercise-script-failures/> * What causes instance names to increment by 3? <https://ask.openstack.org/question/2616/what-causes-instance-names-to-incre…> * how to configure IPv6 for openstack <https://ask.openstack.org/question/2599/how-to-configure-ipv6-for-openstack/> * Snapshot file is created on disk, but never shows up as a snapshot <https://ask.openstack.org/question/2598/snapshot-file-is-created-on-disk-bu…> * Why is this ovs-vsctl running so often <https://ask.openstack.org/question/2596/why-is-this-ovs-vsctl-running-so-of…> * Configuring dm-crypt inside host? <https://ask.openstack.org/question/2577/configuring-dm-crypt-inside-host/> * Healthnmon NoSectionError error <https://ask.openstack.org/question/2574/healthnmon-nosectionerror-error/> * Not able to set cpuset attribute. <https://ask.openstack.org/question/2565/not-able-to-set-cpuset-attribute/> * Swift/Keystone authentication failure <https://ask.openstack.org/question/2543/swiftkeystone-authentication-failur…> * how services token buffer work <https://ask.openstack.org/question/2542/how-services-token-buffer-work/> * How to install healthnmon in Ubuntu? <https://ask.openstack.org/question/2534/how-to-install-healthnmon-in-ubuntu/> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2013-017] Issues in Keystone middleware memcache signing/encryption feature (CVE-2013-2166, CVE-2013-2167)
by Thierry Carrez 19 Jun '13

19 Jun '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-017 CVE: CVE-2013-2166, CVE-2013-2167 Date: June 19, 2013 Title: Issues in Keystone middleware memcache signing/encryption feature Reporter: Paul McMillan (Nebula) Products: python-keystoneclient Affects: version 0.2.3 to 0.2.5 Description: Paul McMillan from Nebula reported multiple issues in the implementation of memcache signing/encryption feature in Keystone client middleware. An attacker with direct write access to the memcache backend (or in a man-in-the-middle position) could insert malicious data and potentially bypass the encryption (CVE-2013-2166) or signing (CVE-2013-2167) security strategy that was specified. Only setups that make use of memcache caching in the Keystone middleware (specify memcache_servers) and using ENCRYPT or MAC as their memcache_security_strategy are affected. python-keystoneclient fix (will be included in upcoming 0.2.6 release): https://review.openstack.org/#/c/33661 References: https://bugs.launchpad.net/python-keystoneclient/+bug/1175367 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2166 https://bugs.launchpad.net/python-keystoneclient/+bug/1175368 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2167 - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJRwdC5AAoJEFB6+JAlsQQjOTQP/1q8R6aPU9RcbsZ5pRm4YU7L gp1XHpoCKmAAFhPjVbjOXLfW0xAfa0B+ATG/BeM4dvysgnQIRb21D4vu4wqCyLq/ Mw6pvytEyd5hGWpSY5eG6cQJ+UrACRDRgjMDIrR6PkwfWK0wW1p+2XzbzH9WIO7F u4/oneUOSlN04wLd1qx0hy2mybFGUu8rPsJyaPJq2qivhGOwIOq85WddurtK1wXl aTdYnavJxmUsTLFHjlpveKaEmlGrYNxeAMTpkZiSANPxU9rcjZNNEmgdGriV1Cdp U3A08z+s7UiZT10cXg3y3C3pNV+upiS5b939fvrSCdJcMmSUBDZ9Bz9zpMYZ/EZm gJLBe2HskHmOfUzdgmVla2HLKqex/no4aLqbVBLkpFhkesKWz+2mTjvTAygjL5vg Ps8viGv80b1DwSUoyI22VChDkXmarkfOFbIdl7yu3h6LDXOSUawA1OiELjlSHyB4 AM1Vl3bSYT9MSHvwymSd4ML/nH01nE0COb1kLzWEqDyFUfq6NjyCOkb74rgrjLH5 E1LVG/4DyYtQ0unOtIT2wyYqEUINAV/qv/GwkhMqroGbPle63+OLRaDtVSciiEdj z/ljz6eMGEeD/cHi80yhsKGo0HjmXzG3X83Y6cSaqWbXUvIw0kbidLwX4fzlnGr0 JCWckqbCAwwKyRNAADVb =1zJ2 -----END PGP SIGNATURE-----

1 0