SUSE-SU-2015:1666-1

Dashboard / Vulnerabilities / SUSE-SU-2015:1666-1

SUSE-SU-2015:1666-1

Summary: Security update for Cloud Compute 12

Details: This collective update for the Cloud Compute 12 Module provides several fixes and enhancements. openstack-suse: - Do not copy upstream Python requirements to the package. (bsc#920573) openstack-nova: - Fix metadata not returning just instance private IP. (bsc#934523) - Enable tenant/user specific instance filtering. (bsc#927625) - Cleanup allocated networks after rescheduling. (bsc#931839) - Fix instance filtering. (bsc#927625) - Websocket Proxy should verify Origin header to prevent Cross-Site WebSocket hijacking. (bsc#917091, CVE-2015-0259) openstack-neutron: - Change neutron-ha-tool to read password from /etc/neutron/os_password. (bsc#922751) - Change port status when it is bound. (bsc#926773) - Require conntrack-tools for SLE12. (bsc#944339) - Allow images with existing routes in the network 169.254.0.0/16 to access metadata server. (bsc#915245) openstack-ceilometer: - Fix issue when ceilometer-expirer is called from the wrong user via cronjob and the resulting logs end up having wrong ownership. (bsc#930574) - Move the cron job to collector package. (bsc#926596) For a comprehensive list of changes, please refer to the packages' change log.

References: https://www.suse.com/support/update/announcement/2015/suse-su-20151666-1/, https://bugzilla.suse.com/915245, https://bugzilla.suse.com/917091, https://bugzilla.suse.com/920573, https://bugzilla.suse.com/922751, https://bugzilla.suse.com/926596, https://bugzilla.suse.com/926773, https://bugzilla.suse.com/927625, https://bugzilla.suse.com/930574, https://bugzilla.suse.com/931839, https://bugzilla.suse.com/934523, https://bugzilla.suse.com/944339, https://www.suse.com/security/cve/CVE-2015-0259