- OpenStack-announce - lists.openstack.org

[OSSA-2016-010] XSS in Horizon client side template (CVE-2016-4428)
by Tristan Cacqueray 17 Jun '16

17 Jun '16

================================================== OSSA-2016-010: XSS in Horizon client side template ================================================== :Date: June 15, 2016 :CVE: CVE-2016-4428 Affects ~~~~~~~ - Horizon: <=8.0.1, >=9.0.0 <=9.0.1 Description ~~~~~~~~~~~ Beth Lancaster and Brandon Sawyers from Virginia Tech reported a vulnerability in Horizon. By injecting Angularjs template in dashboard forms, such as image's description, an authenticated user may trigger a cross-site-scripting vulnerability when another user browses the affected pages. It may result in potential assets theft like user access credentials. All Horizon setups are affected. Patches ~~~~~~~ - https://review.openstack.org/329997 (Liberty) - https://review.openstack.org/329996 (Mitaka) - https://review.openstack.org/329998 (Newton) Credits ~~~~~~~ - Beth Lancaster from Virginia Tech (CVE-2016-4428) - Brandon Sawyers from Virginia Tech (CVE-2016-4428) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1567673 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4428 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[new][tripleo] instack-undercloud 4.1.0 release (mitaka)
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are psyched to announce the release of: instack-undercloud 4.1.0: instack-undercloud This release is part of the mitaka release series. With source available at: http://git.openstack.org/cgit/openstack/instack-undercloud Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in instack-undercloud 4.0.0..4.1.0 ------------------------------------------ 83754f0 Add aodh port to filewall rules bb31faa Fix inspection_enable_uefi description 8d15d38 Add option to enable introspection of UEFI nodes 91d5c0d Add aodh as part of endpoints generation d3d844d Add a reload of keepalived 0810f6f Force rebuild of ramdisk as part of overcloud-full f512dc1 Set mariadb open_files_limit to -1 (unlimited) a508ad7 Temporarily set +e on systemd-journald restart for +bug/1564471 601a518 Update .gitreview defaultbranch for stable/mitaka Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../overcloud-full/post-install.d/90-rebuild-ramdisk | 6 ++++++ .../os-refresh-config/post-configure.d/10-iptables | 1 + elements/puppet-stack-config/puppet-stack-config.pp | 1 + .../puppet-stack-config.yaml.template | 7 ++++--- .../pre-install.d/01-persistent-journal | 11 ++++++++++- .../os-refresh-config/configure.d/30-reload-keepalived | 11 +++++++++++ instack_undercloud/undercloud.py | 16 ++++++++++++++++ undercloud.conf.sample | 4 ++++ 10 files changed, 55 insertions(+), 6 deletions(-)

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are thrilled to announce the release of: openstack-ansible-rsyslog_server 13.1.3: rsyslog_server for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-rsyslog_server 13.1.0..13.1.3 ---------------------------------------------------------- 2a9efa8 Role tests should test against the same branch 97d09ee Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 6 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are pumped to announce the release of: openstack-ansible-rabbitmq_server 13.1.3: rabbitmq_server for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-rabbitmq_server 13.1.2..13.1.3 ----------------------------------------------------------- f44e61a install rabbitmq-server in serial 0327e9c Reorganize test playbooks Diffstat (except docs and test files) ------------------------------------- tox.ini | 5 ++ 14 files changed, 312 insertions(+), 259 deletions(-)

1 0

[new][openstackansible] openstack-ansible-plugins 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are stoked to announce the release of: openstack-ansible-plugins 13.1.3: plugins for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-plugins 13.1.1..13.1.3 --------------------------------------------------- d1f38d5 Adjust release note for config template Diffstat (except docs and test files) ------------------------------------- ...fig_template-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_cinder 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are glad to announce the release of: openstack-ansible-os_cinder 13.1.3: os_cinder role for OpenStack- Ansible For more details, please see below. Changes in openstack-ansible-os_cinder 13.1.1..13.1.3 ----------------------------------------------------- 12a1e1c Added task to install apt packages idependent of the cinder-volume backend Diffstat (except docs and test files) ------------------------------------- tasks/cinder_install_apt.yml | 14 +++++++++++++- vars/ubuntu-14.04.yml | 4 +++- 2 files changed, 16 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_heat 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are pleased to announce the release of: openstack-ansible-os_heat 13.1.3: os_heat for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_heat 13.1.0..13.1.3 --------------------------------------------------- c1d1216 Role tests should test against the same branch ce33461 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index a39d560..1b11d03 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ apt-transport-https + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_glance 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are pumped to announce the release of: openstack-ansible-os_glance 13.1.3: os_glance for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_glance 13.1.0..13.1.3 ----------------------------------------------------- 835aef8 Add dependencies for paramiko 2.0 ceb4dee Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 18 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are delighted to announce the release of: openstack-ansible-os_aodh 13.1.3: os_aodh for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_aodh 13.1.0..13.1.3 --------------------------------------------------- 1621cce Add dependencies for paramiko 2.0 60853e6 Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.1.3 release
by no-reply＠openstack.org 17 Jun '16

17 Jun '16

We are gleeful to announce the release of: openstack-ansible-os_ceilometer 13.1.3: os_ceilometer role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.1.0..13.1.3 --------------------------------------------------------- abec6e0 Role tests should test against the same branch 71017f7 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0