[Openstack] [OSSA 2013-018] Missing SSL certificate check in Python glance client (CVE-2013-4111)

, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJR98rhAAoJEFB6+JAlsQQjm30P/3zp1YGzDb30pSOcfKz683VR KGYEoRUx3wPLMCC5Vzl4y63xwrl7nrarKNj6VeyU/JUzBVhlIa

Re: [Openstack] Summit Sessions

e. Indeed, the Design Summit proposals are not open yet. We need to make progress in the PTLs discussion about scheduling first. To avoid confusion I took down the Havana design summit site for the moment. Regards, -- Thierry Carrez (ttx) ___ Mailing

[Openstack] Minutes from the Technical Committee meeting (July 30)

13-07-30-20.02.html More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/li

Re: [Openstack] Long lag in mailing list

ch quicker soon. > > Great! It was very jarring to see my responses to questions from > yesterday morning only land this morning. :) The 3-hour lag is now down to 20 minutes. -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.or

[Openstack] Minutes from the Technical Committee meeting (August 6)

eetings/tc/2013/tc.2013-08-06-20.01.html More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing list: http://lists.openstack.org/cg

[Openstack] [OSSA 2013-022] Swift Denial of Service using superfluous object tombstones (CVE-2013-4155)

://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4155 https://bugs.launchpad.net/swift/+bug/1196932 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net

[Openstack] [OSSA 2013-023] Denial of Service using XML entities in Nova/Cinder extensions (CVE-2013-4179, CVE-2013-4202)

: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4179 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4202 https://launchpad.net/bugs/1190229 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment

Re: [Openstack] 'sudo ovs-vsctl' hit no tty issue

>line=sudo: no tty present and no askpass program specified You should use the rootwrap to make sudo calls. See other examples in the code where you call execute with run_as_root=True and add the corresponding filter to etc/rootwrap.d. Slightly outdated doc @ https://wiki.openstack.org/wiki/Nova/

[Openstack] Minutes from the Technical Committee meeting (August 20)

s at: http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-08-20-20.01.html More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing

[Openstack] [OSSA 2013-024] Resource limit circumvention in Nova private flavors (CVE-2013-4278)

212179 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIbBAEBCAAGBQJSHfbsAAoJEFB6+JAlsQQjPUkP9i/41IQPecZ/1V7nsQLPWssp AUgP5tEwEUGVN

Re: [Openstack] Ironic release date?

irst usable release by the end of the Icehouse cycle (April 2014) and full integration in OpenStack common release by the end of the J cycle (October 2014). -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openst

[Openstack] Minutes from the Technical Committee meeting (Sept 3)

lCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailma

[Openstack] Havana-3 development milestone available

ment cycle (Icehouse) will start. Final coordinated release is expected on October 17th. More information on the OpenStack development cycle can be found at: https://wiki.openstack.org/wiki/Release_Cycle Regards, -- Thierry Carrez (ttx) ___ Mailing

Re: [Openstack] [OpenStack] Links to summit sessions

rom there if you search and find the session topic and > click, it seems to again redirect back to main page. Do you mean design summit sessions, or summit (conference) presentations ? Direct links to design summit sessions seem to work alright: http://summit.openstack.org/cfp

Re: [Openstack] Fwd: Making the Hong Kong Summit as inclusive as possible

cellent Be excellent to everyone. If you think someone is not being excellent to you at the OpenStack Summit call or email . """ -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Making the Hong Kong Summit as inclusive as possible

Eric Windisch wrote: > Are Bill & Ted really our patrons of anti-harassment? We need something > more substantial than a Bill & Ted quote. Party on! I'm not saying what we have is sufficient. I'm just accurately describing the current state.

[Openstack] [OSSA 2013-025] Token revocation failure using Keystone memcache/KVS backends (CVE-2013-4294)

/ Folsom fix: https://review.openstack.org/#/c/46079/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4294 https://bugs.launchpad.net/keystone/+bug/1202952 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12

[Openstack] [OSSA 2013-026] Potential denial of service on Nova when using Qpid (CVE-2013-4261)

://review.openstack.org/#/c/43303/ Folsom fix: https://review.openstack.org/#/c/45426/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4261 https://bugs.launchpad.net/nova/+bug/1215091 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version

[Openstack] Minutes from the Technical Committee meeting (Sept 24)

s at: http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-09-24-20.01.html More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing

[Openstack] [Keystone] Havana RC1 available

er" branch of Keystone is now open for Icehouse development, and feature freeze restrictions no longer apply there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to

[Openstack] [Glance] Havana RC1 available

there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Ceilometer] Havana RC1 available

is now open for Icehouse development, and feature freeze restrictions no longer apply there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Uns

Re: [Openstack] [Ceilometer] Havana RC1 available

Thierry Carrez wrote: > Hello everyone, > > Last for today, the Ceilometer first release candidate for the Havana > release was just published. 50 bugs were fixed since feature freeze 3 > weeks ago. RC1 is available for download at: > > https://launchpad.net/ceilome

[Openstack] Nova, Neutron, Heat and Horizon Havana RC1 available

rizon/+filebug and tag it *havana-rc-potential* to bring it to the release crew's attention. Note that the "master" branches of Nova, Neutron, Heat and Horizon are now open for Icehouse development, and feature freeze restrictions no longer apply there. Regards, --

[Openstack] [Cinder] Havana RC1 available

feature freeze restrictions no longer apply there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/

[Openstack] [Swift] Havana RC1 (1.10.0-rc1) available

"master" branch of Swift is now open for Icehouse development. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://li

Re: [Openstack] [All] Summit Session Proposal Voting

nd up with 12 Docker talks). (disclaimer: I have never been a track chair so I only speculate on the process they follow) -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : ope

[Openstack] OpenStack "L" naming poll

he 4 candidates in your personal order of preference! You can find a quick rationale behind each name at: https://wiki.openstack.org/wiki/Release_Naming The poll closes Tuesday, February 10th at 19:59 UTC (just before the TC IRC meeting where the results will be proclaimed). Thanks! -- Thie

Re: [Openstack] OpenStack "L" naming poll

Thierry Carrez wrote: > The poll closes Tuesday, February 10th at 19:59 UTC (just before the TC > IRC meeting where the results will be proclaimed). I failed to follow up officially on the results. This ended up being an extremely close call between Liberty and Lizard, but in the end &q

Re: [Openstack] [OpenStack] no irc log for #openstack-nova?

y[1] is approved by the Technical Committee, we'll be able to rely on logging being present in any OpenStack IRC channel. [1] https://review.openstack.org/#/c/159930/ -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailma

[Openstack] [Heat] Kilo RC1 available

feature freeze restrictions no longer apply there ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/

[Openstack] [Keystone] Kilo RC1 available

feature freeze restrictions no longer apply there ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/

[Openstack] [Cinder] [Sahara] Kilo RC1 available

-potential* to bring it to the release crew's attention. Note that the "master" branches of Cinder and Sahara are now open for Liberty development, and feature freeze restrictions no longer apply there ! Regards, -- Thierry Carrez (ttx) _

[Openstack] [Neutron] [Ceilometer] Kilo RC1 available

;master" branches of Neutron and Ceilometer are now open for Liberty development, and feature freeze restrictions no longer apply there ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstac

[Openstack] [ironic] Kilo RC1 available

strictions no longer apply there ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Horizon] Kilo RC1 available

nt, and feature freeze restrictions no longer apply there ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openst

[Openstack] [Swift] Kilo RC1 available

t could be considered release-critical, please file it at: https://bugs.launchpad.net/swift/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.op

[Openstack] [Swift] Kilo RC2 available

at: https://github.com/openstack/swift/tree/stable/kilo If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/swift/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Regards, -- Thie

[Openstack] [Nova][Sahara][Heat] Kilo RC2 available

at: https://bugs.launchpad.net/nova/+filebug https://bugs.launchpad.net/sahara/+filebug https://bugs.launchpad.net/heat/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mai

[Openstack] [Trove] Kilo RC2 available

ree/stable/kilo If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/trove/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx)

[Openstack] [Neutron][Keystone] Kilo RC2 available

e/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Uns

[Openstack] [Ironic] Kilo RC2 available

ree/stable/kilo If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/ironic/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thie

[Openstack] [Ceilometer] Kilo RC2 available

ceilometer/tree/stable/kilo If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/ceilometer/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thie

[Openstack] [Glance][Horizon][Cinder] Kilo RC2 available

lease file it at: https://bugs.launchpad.net/glance/+filebug or https://bugs.launchpad.net/horizon/+filebug or https://bugs.launchpad.net/cinder/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thie

[Openstack] [Neutron] Kilo RC3 available

g it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Uns

[Openstack] [Nova] Kilo RC3 available

t could be considered release-critical, please file it at: https://bugs.launchpad.net/nova/+filebug and tag it *kilo-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openst

[Openstack] OpenStack 2015.1.0 ("Kilo") is released !

res, as well as upgrade notes and current lists of known issues. You can access them at: https://wiki.openstack.org/wiki/ReleaseNotes/Kilo Thanks again to all the individuals who contributed to this development cycle and helped in making this release a success ! -- Thie

Re: [Openstack] Data from the OpenStack Dashboard for MSR Conference

challenge. Is anyone interested in leading that from the OpenStack community side ? -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsu

[Openstack] [release] Release announcements convergence

summary, if you're not yet subscribed to -announce and would like to be the first to know when something is released in the OpenStack world, now would be a good time to do so. openstack-announce is very low traffic, you should expect less than 12

Re: [Openstack] [openstack-dev] [Openstack-operators] Rescinding the M name decision

ildings. In China, building miss the 4th floor instead. 9 is feared in Japan. And don't talk about 39 to Afghans. I think "growing up" is accepting the pain that comes with picking a good name, rather than sidestepping the issue. -- Thierry Carrez (ttx) _

Re: [Openstack] will there be any more ATC code

V.Mock wrote: > I was just wondering whether all the ATC codes for Tokyo have been given > out already? would there be any chance to receive ATC code at this point? We usually do a last run of invites for late contributors as we near the liberty-3 milestone. Please stay put ! -- Thierry

[Openstack] [Keystone] [Manila] Liberty RC1 available

here ! Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Heat] [Zaqar] Liberty RC1 available

://bugs.launchpad.net/zaqar/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Note that the "master" branches of Heat and Zaqar are now officially open for Mitaka development, so feature freeze restrictions no longer apply there. Regards, -- Thie

[Openstack] [Cinder] [Designate] Liberty RC1 available

there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Nova] [Trove] Liberty RC1 available

://bugs.launchpad.net/trove/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Note that the "master" branches of Nova and Trove are now officially open for Mitaka development, so feature freeze restrictions no longer apply there. Regards, -- Thie

[Openstack] [Neutron] [Ceilometer] Liberty RC1 available

ger apply there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Glance] [Horizon] [Sahara] [Barbican] Liberty RC1 available

cially open for Mitaka development, so feature freeze restrictions no longer apply there. Regards, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Uns

[Openstack] [Manila] Liberty RC2 available

h at: http://git.openstack.org/cgit/openstack/manila/log/?h=stable/liberty If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/manila/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thie

[Openstack] [Zaqar] Liberty RC2 available

/?h=stable/liberty If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/zaqar/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx)

[Openstack] [Trove][Barbican] Liberty RC2 available

.net/trove/+filebug or https://bugs.launchpad.net/barbican/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo

[Openstack] [Designate][Ceilometer] Liberty RC2 available

ed release-critical, please file it at: https://bugs.launchpad.net/designate/+filebug or https://bugs.launchpad.net/ceilometer/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx)

[Openstack] [Cinder][Keystone] Liberty RC2 available

al, please file it at: https://bugs.launchpad.net/cinder/+filebug or https://bugs.launchpad.net/keystone/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mai

[Openstack] [Neutron][Heat] Liberty RC2 available

al, please file it at: https://bugs.launchpad.net/neutron/+filebug or https://bugs.launchpad.net/heat/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mai

[Openstack] [Horizon] Liberty RC2 available

k.org/cgit/openstack/horizon/log/?h=stable/liberty If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/horizon/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thie

[Openstack] [Nova][Glance] Liberty RC2 available

a/+filebug or https://bugs.launchpad.net/glance/+filebug and tag it *liberty-rc-potential* to bring it to the release crew's attention. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/op

[Openstack] [Nova][Cinder][Manila] Liberty RC3 available

berty/liberty-rc3 https://launchpad.net/manila/liberty/liberty-rc3 You'll have to walk over my dead body to get a release candidate respin for those at this stage, so these tarballs will likely be formally released as final "Liberty" versions Thursday. Cheers! --

[Openstack] [Neutron][Glance] Liberty RC3 available

https://launchpad.net/neutron/liberty/liberty-rc3 Unless hell freezes in the next four hours, these tarballs be formally released as final "Liberty" versions tomorrow. Cheers! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.o

[Openstack] OpenStack "Liberty" is officially released !

in making this release a success ! Our next development cycle, Mitaka, is already started. We'll all gather in Tokyo in 10 days at the Mitaka Design Summit to brainstorm and plan this next cycle. See you there ! -- Thierry Carrez (ttx) __

[Openstack] [Glance] Havana RC2 available

it to the release crew's attention. Happy regression hunting, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openst

[Openstack] [Cinder] Havana RC2 available

he release crew's attention. Happy regression hunting, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/

[Openstack] [Nova] [Heat] Havana RC2 available

ession that could be considered release-critical, please file it at https://bugs.launchpad.net/nova/+filebug (or https://bugs.launchpad.net/heat/+filebug if the bug is in Heat) and tag it *havana-rc-potential* to bring it to the release crew's attention. Happy regression hunting,

[Openstack] [Neutron] Havana RC2 available

o bring it to the release crew's attention. NB: we still have RC2 windows opened for Keystone, Ceilometer and Horizon. Those should all be published very early next week. Happy regression hunting, -- Thierry Carrez (ttx) ___ Mai

[Openstack] [Ceilometer] Havana RC2 available

it to the release crew's attention. Happy regression hunting, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openst

[Openstack] [Keystone] [Horizon] Havana RC2 available

's attention. Happy regression hunting, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [Cinder] Havana RC3 available

net/cinder/+filebug and tag it *havana-rc-potential* to bring it to the release crew's attention. Cheers, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.

[Openstack] [Keystone] Havana RC3 available

ad.net/keystone/+filebug and tag it *havana-rc-potential* to bring it to the release crew's attention. Cheers, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.opens

[Openstack] [Keystone] Havana RC4 available !

it to the release crew's attention. Cheers, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/m

[Openstack] [Neutron] Havana RC3 available !

code at: https://github.com/openstack/neutron/tree/milestone-proposed If you find a regression that could be considered release-critical, please file it at https://bugs.launchpad.net/neutron/+filebug and tag it *havana-rc-potential* to bring it to the release crew's attention. Cheers, --

[Openstack] [Horizon] Havana RC3 available !!

ential* so that it's properly documented in our release notes as a known bug. Cheers, -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.or

[Openstack] OpenStack 2013.2 ("Havana") is released !

". It's not too late to join us there, see http://www.openstack.org/summit/openstack-summit-hong-kong-2013/ for more details. Congratulations to everyone who contributed to this development cycle and participated in making this awesome release possible !

Re: [Openstack] Havana release notes in multiple languages

ease notes are living creatures though, and some sections (especially the "known bugs" sections) may be updated in the future. I'd advise to subscribe to changes to that page so that further modifications can be translated as well. Regards, -- Thierry Carrez (ttx) ___

[Openstack] [OSSA 2013-027] Glance image_download policy not enforced for cached images (CVE-2013-4428)

://bugs.launchpad.net/glance/+bug/1235378 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJSZpnsAAoJEFB6+JAlsQQjOpMQAMFKO3bARjWRONmB+MjllfYj

Re: [Openstack] Promoting the role of +1 reviewers in our community

gt; the CLA. > > Similarly this page > > https://wiki.openstack.org/wiki/Gerrit_Workflow > > only mentions review in the context of what happens to *your* patch. Agreed. The "how to contribute" page was supposed to be completely overhauled anyway -- we should just

[Openstack] [OSSA 2013-028] Unintentional role granting with Keystone LDAP backend (CVE-2013-4477)

https://review.openstack.org/53154 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4477 https://bugs.launchpad.net/keystone/+bug/1242855 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Co

[Openstack] [OSSA 2013-029] Potential Nova denial of service through compressed disk images (CVE-2013-4463, CVE-2013-4469)

chpad.net/nova/+bug/1206081 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJScomUAAoJEFB6+JAlsQQjKf8QALc4olBe4QHSUg+

[Openstack] Resolutions from the Technical Committee

The OpenStack Technical Committee ("TC") recently adopted the following resolutions: * Thierry Carrez was selected as the TC chair for the 6-month Icehouse session of the TC. * The TC recommends that the Board of Directors approve the addition (by the Secretary) of OpenStack Me

Re: [Openstack] [Foundation Board] Resolutions from the Technical Committee

is usage is actually allowed. In all cases clarification for that grey area is definitely desirable... for the current projects and to set expectations right for the ones coming up. -- Thierry Carrez (ttx) ___ Mailing list: http://lists.o

Re: [Openstack] [Foundation Board] Resolutions from the Technical Committee

er"). So I'm not sure we can do away with the concept of core entirely until the interop work is done... but we could certainly stop using that same confusing term for both things. -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] [Foundation Board] Resolutions from the Technical Committee

Core", I definitely wouldn't go as far as saying *integrated* = *core* at this point. -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] [Foundation Board] Resolutions from the Technical Committee

ignoring this confusing "Core OpenStack project" language and continue using the term "core" to designate the subset of integrated projects that you are /required/ to implement to call your implementation "an OpenStack cloud". -- Thierry Carrez (ttx) ___

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

using PowerVM: http://www.openstack.org/blog/2013/11/openstack-user-survey-statistics-november-2013/ Maybe the user committee could help us make sure that user knows about this plan ? -- Thierry Carrez (ttx) ___ Mailing list: http://lists.ope

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

ng that >> powervm is a dead end instead? I want to minimise confusion on the >> part of people deploying stable releases. > > This would be okay in my opinion. At the very minimum I would add the "dead-end" comment to the Havana release notes. If

[Openstack] [OSSA 2013-031] Ceilometer DB2/MongoDB backend password leak (CVE-2013-6384)

://bugs.launchpad.net/ceilometer/+bug/1244476 Regards, -- Thierry Carrez OpenStack Vulnerability Management Team signature.asc Description: OpenPGP digital signature ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to

[Openstack] Resolutions from the Technical Committee

http://git.openstack.org/cgit/openstack/governance/commit/?id=9564eecb9769cb0fd52ff216b3e3172a6a323e3b More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee __

[Openstack] Icehouse-1 development milestone available

d 738 bugs were fixed during this milestone. The next development milestone, icehouse-2, is scheduled for January 23rd. You can further track upcoming features and Icehouse release cycle status at: http://status.openstack.org/release/ Regards, -- Thierry C

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

ities to developers. You also have to run it while the Design Summit is not running. So separating (or at least staggering) the two events is a prerequisite for success. Yes, you won't have ALL the developers stay for all the conference days. But I'm pretty sure you

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

t cycle. Note that it doesn't prevent having a operator day at the conference (and making sure the devs can attend it). -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lis

[Openstack] OpenStack "J" naming poll

ent to participate to our poll: https://www.surveymonkey.com/s/openstack-j-naming and order the 10 candidates in your personal order of preference. Thanks! -- Thierry Carrez (ttx) ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/ope

Re: [Openstack] OpenStack "J" naming poll

Thierry Carrez wrote: > Please take a moment to participate to our poll: > https://www.surveymonkey.com/s/openstack-j-naming > > and order the 10 candidates in your personal order of preference. > Thanks! Oh. And as indicated in the poll description, poll will be closed next week

[Openstack] [OSSA 2013-037] Nova compute DoS through ephemeral disk backing files (CVE-2013-6437)

://review.openstack.org/62913 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6437 https://bugs.launchpad.net/nova/+bug/1253980 Regards, -- Thierry Carrez OpenStack Vulnerability Management Team signature.asc Description: OpenPGP digital signature

  1   2   >